Vulnerabilitycritical
OpenSSL fixed two high
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-3786+1 related CVE | A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking | 7.5 | 92% |
From the original article
2 min read at securityaffairs.com
The OpenSSL project fixed two high-severity flaws in its cryptography library that can trigger a DoS condition or achieve remote code execution. The OpenSSL project has issued security updates to address a couple of high-severity vulnerabilities, tracked as CVE-2022-3602 and CVE-2022-3786 , in its cryptography library. The flaws impact versions 3.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.