Advisorycritical
OpenSSL Security Advisory Downgraded to High Severity
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-3786+1 related CVE | A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking | 7.5 | 92% |
From the original article
2 min read at infosecurity-magazine.com
Two new vulnerabilities in popular open source library OpenSSL could theoretically cause remote code execution (RCE) and denial of service, although they’re less severe than anticipated. The developers downgraded the status of the much-anticipated software flaws from critical to high severity after additional analysis.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.