Name of the Vulnerable Software and Affected Versions m2crypto (affected versions not specified)

Description A bug was found in the pbkdf2 function of the m2crypto package. When given a 74 byte result, a buffer overflow occurs, leading to a crash of the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.