Internet Bug Bounty · Report #175230
Double-free in X509 parsing
Validstatus
6upvotes
30 Dec 2016disclosed
How it was found
Note: OpenSSL decided not to assign a CVE, so I'm submitting this for reputation points.
See:
https://github.com/openssl/openssl/commit/6dcba070a94b1ead92f3e327cf207a0b7db6596f https://github.com/guidovranken/openssl-x509-vulnerabilities