```toml
[advisory]
id = "RUSTSEC-2018-0010"
package = "openssl"
aliases = ["CVE-2018-20997", "GHSA-xjxc-vfw2-cg96"]
cvss = "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
date = "2018-06-01"
keywords = ["memory-corruption"]
url = "https://github.com/sfackler/rust-openssl/pull/942"

[versions]
patched = [">= 0.10.9"]
unaffected = ["< 0.10.8"]
```

# Use after free in CMS Signing

Affected versions of the OpenSSL crate used structures after they'd been freed.