{"cve":"CVE-2023-0401","nvd":{"published":"2023-02-08T20:15:24.323","modified":"2026-06-17T05:25:27.210","status":"Modified","description":"A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5},"cwes":["CWE-476"],"references":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674","https://security.gentoo.org/glsa/202402-08","https://www.openssl.org/news/secadv/20230207.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003"],"products":["openssl:openssl","stormshield:stormshield_management_center"],"source":"nvd","synced_at":"2026-10-19T21:37:38.595364862+00:00"},"epss":{"cve":"CVE-2023-0401","score":0.01846,"percentile":0.79067,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-vrh7-x64v-7vxq","url":"https://osv.dev/vulnerability/GHSA-vrh7-x64v-7vxq","summary":"openssl-src contains `NULL` dereference during PKCS7 data verification","modified":"2026-09-10T03:49:52.152434742Z","packages":[{"ecosystem":"crates.io","name":"openssl-src","purl":"pkg:cargo/openssl-src","ranges":[">=300.0.0 <300.0.12"],"fixed":["300.0.12"]}]},{"id":"RUSTSEC-2023-0013","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0013","summary":"`NULL` dereference during PKCS7 data verification","modified":"2023-11-08T04:11:08.219502Z","packages":[{"ecosystem":"crates.io","name":"openssl-src","purl":"pkg:cargo/openssl-src","ranges":[">=300.0.0 <300.0.12"],"fixed":["300.0.12"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}