critical9.8
CVE-2018-20997
Use after free in openssl
Impact
An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | openssl | >= 0.10.8, < 0.10.9 | 0.10.9 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rust-Openssl Project | Rust-Openssl | before 0.10.9 |