An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate.
References
Configurations
Configuration 1 (hide)
|
History
21 Apr 2023, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/openbsd/src/commit/4f94258c65a918ee3d8670e93916d15bf879e6ec - Patch | |
| References | (MISC) https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/001_x509.patch.sig - Patch | |
| References | (MISC) https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.1-relnotes.txt - Patch | |
| CPE | cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:* cpe:2.3:a:openbsd:libressl:*:*:*:*:*:*:*:* |
|
| First Time |
Openbsd libressl
Openbsd openbsd Openbsd |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CWE | CWE-295 |
12 Apr 2023, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-12 05:15
Updated : 2023-12-10 15:01
NVD link : CVE-2022-48437
Mitre link : CVE-2022-48437
CVE.ORG link : CVE-2022-48437
JSON object : View
Products Affected
openbsd
- openbsd
- libressl
CWE
CWE-295
Improper Certificate Validation