This doesn't seem all that important. There are numerous bugs around most software out there which can cause it to crash. It's not good, but it's also not the worst one out there.

If it was that bad, it would have been fixed earlier. It was reported first in 2010: https://rt.openssl.org/Ticket/Display.html?id=2167&user=gues...

It was also fixed a few weeks ago.

Edit: Just noticed that the openssl bug tracker passes the username and password in the URL. Oh dear...