-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openssl-src | rust | < 111.15.0 | 111.15.0 |
Miggo AIRoot Cause AnalysisThe patch directly modifies the init_sig_algs function to prevent a NULL pointer dereference by initializing peer_sigalgslen to 0. This indicates that the vulnerability is related to the handling of signature algorithms during TLS renegotiation, specifically when the signature_algorithms extension is omitted but signature_algorithms_cert is present.
RustRustOngoing coverage of React2Shell