CVE-2015-5334

概要

参考情報

• ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt · Release Notes
• lists.opensuse.org/opensuse-updates/2015-10/msg00050.html · Mailing List
• packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-Leak-Overflow.html · Exploit
• seclists.org/fulldisclosure/2015/Oct/75 · Exploit
• securityfocus.com/archive/1/archive/1/536692/100/0/threaded · Broken Link

libressl のその他の脆弱性

• CVE-2023-35784緊急 9.8A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL befo…
• CVE-2021-46880緊急 9.8x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverif…
• CVE-2022-48437中 5.3An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does…
• CVE-2021-41581中 5.5x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When t…
• CVE-2019-25049高 7.1LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).