VDB
Sign up
HIGH

GHSA-6hcf-g6gr-hhcr

`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference

Details

These functions would crash when the context argument was None with certain extension types.

Thanks to David Benjamin (Google) for reporting this issue.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/openssl
Introduced in: 0.9.7Fixed in: 0.10.48

Upgrade openssl to 0.10.48 or newer (ecosystem crates.io).

References