OpenSSL Use-After-Free Vulnerability in Properties Handling

A use-after-free vulnerability has been identified in OpenSSL's Rust bindings, specifically in the 'Md::fetch' and 'Cipher::fetch' functions. This issue arises when a 'Some(...)' value is passed to the properties argument, leading to undefined behavior. The vulnerability causes OpenSSL to misinterpret the properties as an empty string, due to the way string values are managed. The flaw is present in OpenSSL versions 0.10.39 through 0.10.71.

Impact

Exploitation of this vulnerability can lead to memory corruption, with OpenSSL incorrectly parsing property inputs, potentially causing applications to behave unexpectedly.

Reproduction

To reproduce this vulnerability, use OpenSSL's Rust bindings and call either the 'Md::fetch' or 'Cipher::fetch' functions. Pass a 'Some(...)' value to the properties argument. This will trigger the use-after-free condition, causing OpenSSL to treat the properties as an empty string.

Remediation

Users can upgrade to OpenSSL versions 0.10.72 or later, where this vulnerability has been fixed.