Description
OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin Travelpayouts:All Travel Brands in One Place Cross-Site Scripting (0.7.12)
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.19)
WordPress Plugin HAL Cross-Site Scripting (2.1.1)
WordPress Plugin SendPress Newsletters Security Bypass (1.2.10.20)
Squid Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-5824)