Project

General

Profile

Actions
Copy link

Bug #8926

closed
OT VJ

Bug #8857: tls: use-after-free of JA3 elliptic-curve buffers on malloc failure

tls: use-after-free of JA3 elliptic-curve buffers on malloc failure (8.0.x backport)

Bug #8926: tls: use-after-free of JA3 elliptic-curve buffers on malloc failure (8.0.x backport)

Added by OISF Ticketbot 2 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
8.0.7
Affected Versions:
Effort:
Difficulty:
Label:

JI Updated by Jason Ish 2 months ago Actions
Copy link
 #1

  • GHSA set to GHSA-7fvh-vrjw-pq5r

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #2

  • Severity set to LOW

Apply severity from parent ticket: LOW.

SB Updated by Shivani Bhardwaj about 2 months ago Actions
Copy link
 #3

  • Subject changed from tls/ja3: Use-after-free / double-free of JA3 elliptic-curve buffers on allocation failure (8.0.x backport) to tls: use-after-free of JA3 elliptic-curve buffers on malloc failure (8.0.x backport)

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #5

  • Disclosure Date set to 11/02/2026

VJ Updated by Victor Julien about 2 months ago Actions
Copy link
 #6

  • Private changed from Yes to No

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #7

  • Status changed from Assigned to In Review

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #8

  • Status changed from In Review to Closed

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #9

  • Tracker changed from Security to Bug
  • Severity deleted (LOW)
  • Disclosure Date deleted (11/02/2026)
  • GHSA deleted (GHSA-7fvh-vrjw-pq5r)
Actions
Copy link

Also available in: PDF Atom