NetSight
IP …
high7.1

CVE-2019-25048

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print).

Impact

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print).

Affected products

VendorProductAffected versions
OpenbsdLibressl
from 2.9.1 through 3.2.1

Weakness classification

CWE-125

References