sfackler/rust-openssl · Security
`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference
- GHSA ID
- GHSA-6hcf-g6gr-hhcr
- Severity
- high
- Published
- Updated
Description
These functions would crash when the context argument was None with certain extension types.
Thanks to David Benjamin (Google) for reporting this issue.
CWEs
- CWE-476 · NULL Pointer Dereference