CLEANSTART-2024-MH50676

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-MH50676.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2024-MH50676

Upstream

CVE-2021-23840

Published

2026-10-31T14:15:30Z

Modified

2026-10-31T16:01:00Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an int...

Details

Security vulnerability affects the openssl1.1-compat package. Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform.

References

Affected packages

CleanStart / openssl1.1-compat

Package

Name: openssl1.1-compat
Purl: pkg:apk/cleanstart/openssl1.1-compat

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.1.1j-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-MH50676.json"