4 matches found
openssl: invalid pointer dereference in CMP server via crafted protectionAlg
A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...
CVE-2026-63076
Invalid Pointer Dereference in CMP Server via Crafted protectionAlg...
OpenSSL -- Multiple vulnerabilities
The OpenSSL poject reports: Heap Buffer Overflow in CMS Key Unwrapping CVE-2026-63072 Moderate Invalid Pointer Dereference in CMP Server via Crafted protectionAlg CVE-2026-63076 Moderate RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate CVE-2026-14457 Low Excessive...
