libressl Archives - CVE Vulnerability

CVE-2018-8970

Sun, 26 Feb 2023 06:51:41 +0000

The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zero name length, which causes silent omission of hostname verification, and consequently allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: the LibreSSL documentation indicates that this special case is supported, but the BoringSSL documentation does not.

The post CVE-2018-8970 appeared first on CVE Vulnerability.

CVE-2018-12434

Sun, 26 Feb 2023 06:45:39 +0000

LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

The post CVE-2018-12434 appeared first on CVE Vulnerability.

CVE-2019-25048

Sun, 26 Feb 2023 06:32:50 +0000

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print).

The post CVE-2019-25048 appeared first on CVE Vulnerability.

CVE-2019-25049

Sun, 26 Feb 2023 06:32:50 +0000

LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).

The post CVE-2019-25049 appeared first on CVE Vulnerability.

CVE-2021-41581

Thu, 23 Feb 2023 14:12:03 +0000

x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAIN_PART_MAX_LEN, the buffer lacks ” termination.

The post CVE-2021-41581 appeared first on CVE Vulnerability.