Vulnerabilitycritical
Threat Brief: CVE-2022-3786 and CVE-2022
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-3786+1 related CVE | A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking | 7.5 | 92% |
From the original article
8 min read at unit42.paloaltonetworks.com
On November 1, 2022, OpenSSL released a security advisory describing two high severity vulnerabilities within the OpenSSL library ( CVE-2022-3786 and CVE-2022-3602 ). OpenSSL versions from 3. 0.
By Shawn Westfall · unit42.paloaltonetworks.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.