An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate.
References
Configurations
Configuration 1 (hide)
|
History
10 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/openbsd/src/commit/4f94258c65a918ee3d8670e93916d15bf879e6ec - Patch | |
| References | () https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.1-relnotes.txt - Patch | |
| References | () https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/001_x509.patch.sig - Patch |
21 Apr 2023, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CWE | CWE-295 | |
| First Time |
Openbsd
Openbsd openbsd Openbsd libressl |
|
| CPE | cpe:2.3:a:openbsd:libressl:*:*:*:*:*:*:*:* cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/001_x509.patch.sig - Patch | |
| References | (MISC) https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.1-relnotes.txt - Patch | |
| References | (MISC) https://github.com/openbsd/src/commit/4f94258c65a918ee3d8670e93916d15bf879e6ec - Patch |
12 Apr 2023, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-12 05:15
Updated : 2025-02-10 17:15
NVD link : CVE-2022-48437
Mitre link : CVE-2022-48437
JSON object : View
Products Affected
openbsd
- openbsd
- libressl
CWE
CWE-295
Improper Certificate Validation