`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference · GHSA-6hcf-g6gr-hhcr · GitHub Advisory Database · GitHub

`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference

High severity GitHub Reviewed Published Mar 24, 2023 to the GitHub Advisory Database • Updated Mar 24, 2023

Package

openssl (Rust)

Affected versions

>= 0.9.7, < 0.10.48

Patched versions

0.10.48

Description

These functions would crash when the context argument was None with certain extension types.

Thanks to David Benjamin (Google) for reporting this issue.

References

Published to the GitHub Advisory Database Mar 24, 2023

Reviewed Mar 24, 2023

Last updated Mar 24, 2023