An invalid pointer dereference on read can be triggered when an
application tries to load malformed PKCS7 data with the
d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.

The result of the dereference is an application crash which could
lead to a denial of service attack. The TLS implementation in OpenSSL
does not call this function however third party applications might
call these functions on untrusted data.

osv 10

openssl 1

redhatcve 1

prion 1

nvd 1

ubuntucve 1

cgr 1

wolfi 1

cve 1

alpinelinux 1

cvelist 1

debiancve 1