openssl:x509: Heap-buffer-overflow in ossl_x509_check_cert_time

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5880369384849408 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 14 Crash Address: 0x7b72ac1e049d...

UBUNTU-CVE-2015-1789

The X509cmptime function in crypto/x509/x509vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted length field in ASN1TIME data, as demonstrated...