An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function however third party applications might call these functions on untrusted data.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-opensslalma-upgrade-openssl-develalma-upgrade-openssl-libsalma-upgrade-openssl-perl | Mar 1, 2023 | Feb 8, 2023 | |
| Alpine Linux | alpine-linux-upgrade-openssl3alpine-linux-upgrade-openssl | Aug 22, 2024 | Feb 8, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-opensslamazon-linux-2023-upgrade-openssl-debuginfoamazon-linux-2023-upgrade-openssl-debugsourceamazon-linux-2023-upgrade-openssl-develamazon-linux-2023-upgrade-openssl-libsamazon-linux-2023-upgrade-openssl-libs-debuginfoamazon-linux-2023-upgrade-openssl-perl | Feb 17, 2025 | Feb 7, 2023 | |
| Centos_linux | — | centos-upgrade-opensslcentos-upgrade-openssl-debuginfocentos-upgrade-openssl-debugsourcecentos-upgrade-openssl-develcentos-upgrade-openssl-libscentos-upgrade-openssl-libs-debuginfocentos-upgrade-openssl-perl | Mar 1, 2023 | Feb 8, 2023 |
| Debian | debian-upgrade-openssl | Jul 30, 2024 | Feb 8, 2023 | |
| Freebsd | freebsd-upgrade-package-opensslfreebsd-upgrade-package-openssl-develfreebsd-upgrade-package-openssl-quictls | Feb 9, 2023 | Feb 7, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-openssl | Feb 5, 2024 | Feb 8, 2023 | |
| Http Openssl | openssl-upgrade-latest | Feb 8, 2023 | Feb 8, 2023 | |
| Ibm Aix | ibm-aix-openssl_advisory38 | Jul 27, 2023 | Feb 8, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-openssloracle-linux-upgrade-openssl-develoracle-linux-upgrade-openssl-libsoracle-linux-upgrade-openssl-perl | Mar 2, 2023 | Feb 7, 2023 |
| Rapid7 Insightagent | — | Mar 19, 2024 | Feb 8, 2023 | |
| Redhat_linux | redhat-upgrade-opensslredhat-upgrade-openssl-debuginforedhat-upgrade-openssl-debugsourceredhat-upgrade-openssl-develredhat-upgrade-openssl-libsredhat-upgrade-openssl-libs-debuginforedhat-upgrade-openssl-perl | Mar 1, 2023 | Feb 8, 2023 | |
| Rocky_linux | rocky-upgrade-opensslrocky-upgrade-openssl-debuginforocky-upgrade-openssl-debugsourcerocky-upgrade-openssl-develrocky-upgrade-openssl-libsrocky-upgrade-openssl-libs-debuginforocky-upgrade-openssl-perl | Mar 12, 2024 | Feb 8, 2023 | |
| Sonicwall Sma 100 | sonicwall-sma100-upgrade-latest | Apr 3, 2023 | Feb 9, 2023 | |
| Sonicwall Sonicos | sonicwall-sonicos-gen6-nsv-upgrade-6544-44v-21-2079sonicwall-sonicos-gen6-tz-nsa-upgrade-65412-101n | Jun 12, 2026 | Feb 9, 2023 | |
| Suse | — | suse-upgrade-libopenssl-3-develsuse-upgrade-libopenssl-3-devel-32bitsuse-upgrade-libopenssl3suse-upgrade-libopenssl3-32bitsuse-upgrade-openssl-3suse-upgrade-openssl-3-doc | Feb 8, 2023 | Feb 7, 2023 |
| Ubuntu | ubuntu-upgrade-libssl3 | Mar 22, 2023 | Feb 8, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub