GHSA-h8jm-2x53-xhp5

Source

https://github.com/advisories/GHSA-h8jm-2x53-xhp5

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/11/GHSA-h8jm-2x53-xhp5/GHSA-h8jm-2x53-xhp5.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-h8jm-2x53-xhp5

Aliases

Downstream

CGA (4)

Published

2022-11-01T17:45:21Z

Modified

2026-07-17T21:06:54Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

X.509 Email Address Variable Length Buffer Overflow

Details

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the . character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service).

In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.

Database specific

{
    "cwe_ids":  [
        "CWE-120"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2022-11-01T17:45:21Z",
    "nvd_published_at":  "2022-11-01T18:15:00Z",
    "severity":  "HIGH"
}

References

Affected packages

crates.io / openssl-src

Package

Name: openssl-src; View open source insights on deps.dev
Purl: pkg:cargo/openssl-src

Affected ranges

Type: SEMVER
Events: Introduced

300.0.0

Fixed

300.0.11

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/11/GHSA-h8jm-2x53-xhp5/GHSA-h8jm-2x53-xhp5.json"