CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.0 are vulnerable due to a logging bug in the `restore_hidden_modules()` function, which inaccurately logs module counts, potentially corrupting audit trails. Additionally, a race condition may allow blocked modules to be re-imported in multi-threaded environments, posing a risk of unauthorized access. Organizations using affected versions should prioritize this vulnerability to ensure the integrity of their logging and module management processes.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.0 contain a logging bug in restore_hidden_modules() that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another thread could re-import blocked modules in multi-threaded environments.
Related CVEs
Other vulnerabilities affecting the same vendor(s)