OpenSSL -- Use after free vulnerability

2024-05-2800:00:00

vuxml.freebsd.org

openssl

use after free

vulnerability

ssl_free_buffers

memory

unix

6.9 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

The OpenSSL project reports:

Use After Free with SSL_free_buffers (low).
Calling the OpenSSL API function SSL_free_buffers may cause
memory to be accessed that was previously freed in some situations

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopenssl< 3.0.13_5,1UNKNOWN
FreeBSDanynoarchopenssl31< 3.1.5_5UNKNOWN
FreeBSDanynoarchopenssl32< 3.2.1_5UNKNOWN
FreeBSDanynoarchopenssl33< 3.3.0_2UNKNOWN
FreeBSDanynoarchopenssl-quictls< 3.0.13_5UNKNOWN
FreeBSDanynoarchopenssl31-quictls< 3.1.5_5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	openssl	< 3.0.13_5,1	UNKNOWN
FreeBSD	any	noarch	openssl31	< 3.1.5_5	UNKNOWN
FreeBSD	any	noarch	openssl32	< 3.2.1_5	UNKNOWN
FreeBSD	any	noarch	openssl33	< 3.3.0_2	UNKNOWN
FreeBSD	any	noarch	openssl-quictls	< 3.0.13_5	UNKNOWN
FreeBSD	any	noarch	openssl31-quictls	< 3.1.5_5	UNKNOWN