high7.1
CVE-2019-25049
LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).
Impact
LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Libressl | from 2.9.1 through 3.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1965.yaml
- https://github.com/libressl-portable/portable/commit/17c88164016df821df2dff4b2b1291291ec4f28a
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1965.yaml
- https://github.com/libressl-portable/portable/commit/17c88164016df821df2dff4b2b1291291ec4f28a