REDHAT-BUG-2357560: Use After Free
When a Some(...) value was passed to the properties argument of either of these functions, a use-after-free would result.
In practice this would nearly always result in OpenSSL treating the properties as an empty string (due to CString::drop's behavior).
The maintainers thank quitbug for reporting this vulnerability to us.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2357560?
REDHAT-BUG-2357560 is a critical vulnerability due to the use-after-free in OpenSSL that can lead to unintended behavior.
How do I fix REDHAT-BUG-2357560?
To fix REDHAT-BUG-2357560, update to the latest patched version of OpenSSL that resolves this use-after-free issue.
What systems are affected by REDHAT-BUG-2357560?
The systems affected by REDHAT-BUG-2357560 include various distributions that utilize the vulnerable versions of OpenSSL.
What are the potential impacts of REDHAT-BUG-2357560?
The potential impacts of REDHAT-BUG-2357560 include application crashes, unexpected behavior, and security risks related to improper handling of cryptographic properties.
Who reported the vulnerability REDHAT-BUG-2357560?
The vulnerability REDHAT-BUG-2357560 was reported by a contributor known as quitbug.