Use-After-Free

2023-02-0323:01:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

openssl

vulnerability

missing check

initialization function

application crash

0.0004 Low

EPSS

Percentile

5.1%

JSON

openssl is vulnerable to Use-After-Free. The vulnerability exists because there is a missing check for the return value from the initialization function which allows an attacker to cause an application crash.

CPENameOperatorVersion
kernel-rteq4.18.0__257.rt7.22.el8
kernel-rteq4.18.0__294.rt7.61.el8
kernel-rteq4.18.0__193.13.2.rt13.65.el8_2
kernel-rteq4.18.0__383.rt7.168.el8
kernel-rteq4.18.0__305.85.1.rt7.157.el8_4
kernel-rteq4.18.0__240.rt7.54.el8
kernel-rteq4.18.0__236.rt7.49.el8
kernel-rteq4.18.0__193.12.1.rt13.63.el8_2
kernel-rteq4.18.0__394.rt7.179.el8
kernel-rteq4.18.0__372.51.1.rt7.208.el8_6

Name	Operator	Version
kernel-rt	eq	4.18.0__257.rt7.22.el8
kernel-rt	eq	4.18.0__294.rt7.61.el8
kernel-rt	eq	4.18.0__193.13.2.rt13.65.el8_2
kernel-rt	eq	4.18.0__383.rt7.168.el8
kernel-rt	eq	4.18.0__305.85.1.rt7.157.el8_4
kernel-rt	eq	4.18.0__240.rt7.54.el8
kernel-rt	eq	4.18.0__236.rt7.49.el8
kernel-rt	eq	4.18.0__193.12.1.rt13.63.el8_2
kernel-rt	eq	4.18.0__394.rt7.179.el8
kernel-rt	eq	4.18.0__372.51.1.rt7.208.el8_6