Skip to content

Instantly share code, notes, and snippets.

@1047524396
Created April 15, 2024 11:42
Show Gist options
  • Save 1047524396/075a4c91edf38e5d989c79c6bd7ccac4 to your computer and use it in GitHub Desktop.
Save 1047524396/075a4c91edf38e5d989c79c6bd7ccac4 to your computer and use it in GitHub Desktop.
CVE-2024-31577
[CVE ID]
CVE-2024-31577
[PRODUCT]
OpenSSL
[VERSION]
before openssl-3.2.0
[PROBLEM TYPE]
CWE-476: NULL Pointer Dereference
[DESCRIPTION]
OpenSSL before v3.2.0 was discovered to contain a NULL pointer dereference via the component /rand/rand_lib.c.
[PATCH LINK]
https://github.com/openssl/openssl/commit/15410839c668f97b5c03ee1a1bc1a2bf4315715f
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment