GHSA-3gxf-9r58-2ghg
Suggest an improvement- Source
- https://github.com/advisories/GHSA-3gxf-9r58-2ghg
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/03/GHSA-3gxf-9r58-2ghg/GHSA-3gxf-9r58-2ghg.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-3gxf-9r58-2ghg
- Aliases
- Published
- 2023-03-24T22:01:35Z
- Modified
- 2023-11-08T04:14:38.793551Z
- Summary
- `openssl` `X509NameBuilder::build` returned object is not thread safe
- Details
-
OpenSSL has a
modifiedbit that it can set on onX509_NAMEobjects. If this bit is set then the object is not thread-safe even when it appears the code is not modifying the value.Thanks to David Benjamin (Google) for reporting this issue.
- References
Affected packages
crates.io / openssl
Package
- Name
- openssl
- View open source insights on deps.dev
- Purl
- pkg:cargo/openssl