Executive brief
Null pointer deref in `X509_issuer_and_serial_hash()`
Affected products
- crates.io openssl-src
Junglewise Threat Intelligence
CVE-2021-23841: RUSTSEC-2021-0058 - Null pointer deref in `X509_issuer_and_serial_hash()`
CVE-2021-23841 · Severity: low · CVSS 3.1 · Published 2021-05-01
Technologies: openssl-src (crates.io). Vendors: crates.io.
Related threats
- RUSTSEC-2023-0009 - Use-after-free following `BIO_new_NDEF`
- RUSTSEC-2023-0008 - X.509 Name Constraints Read Buffer Overflow
- RUSTSEC-2023-0006 - X.400 address type confusion in X.509 `GeneralName`
- RUSTSEC-2023-0007 - Timing Oracle in RSA Decryption
- RUSTSEC-2023-0011 - Invalid pointer dereference in `d2i_PKCS7` functions