Threats tagged 'ghsa-3r46-fh9h-qv77'

A vulnerability in OpenSSL causes disproportionate heap memory growth when processing certificates with many nameRelativeToCRLIssuer CRL distribution points. This can lead to significant memory pressure and potential Denial of Service during TLS handshakes with maliciously crafted certificates. The issue arises because large memory allocations occur when caching X.509 extensions, even if the certificate size is within accepted limits. The fix delays processing of CRL distribution points until needed, reducing memory usage. This vulnerability does not affect the FIPS module.