CVE-2023-0216

Name of the Vulnerable Software and Affected Versions OpenSSL (affected versions not specified)

Description An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i PKCS7(), d2i PKCS7 bio(), or d2i PKCS7 fp() functions. The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function; however, third-party applications might call these functions on untrusted data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.