```toml
[advisory]
id = "RUSTSEC-2018-0010"
package = "openssl"
aliases = ["CVE-2018-20997"]
date = "2018-06-01"
keywords = ["memory-corruption"]
url = "https://github.com/sfackler/rust-openssl/pull/942"

[versions]
patched = [">= 0.10.9"]
unaffected = ["< 0.10.8"]
```

# Use after free in CMS Signing

Affected versions of the OpenSSL crate used structures after they'd been freed.