An invalid pointer dereference on read can be triggered when an
application tries to load malformed PKCS7 data with the
d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.

The result of the dereference is an application crash which could
lead to a denial of service attack. The TLS implementation in OpenSSL
does not call this function however third party applications might
call these functions on untrusted data.

prion 1

openssl 1

redhatcve 1

cve 1

alpinelinux 1

cgr 1

ubuntucve 1

osv 5

wolfi 1

rustsec 1

nessus 20

veracode 1