CVE-2019-25048

概要

参考情報

• bugs.chromium.org/p/oss-fuzz/issues/detail · Exploit
• google/oss-fuzz-vulns · Third Party Advisory
• libressl-portable/portable commit 17c8816 · Patch

libressl のその他の脆弱性

• CVE-2023-35784緊急 9.8A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL befo…
• CVE-2021-46880緊急 9.8x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverif…
• CVE-2022-48437中 5.3An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does…
• CVE-2021-41581中 5.5x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When t…
• CVE-2019-25049高 7.1LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).