CVE-2021-46880

Description

References

• ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.2-relnotes.txt · Release Notes
• ftp.openbsd.org/pub/OpenBSD/patches/7.0/common/006_x509.patch.sig · Patch
• openbsd/src commit 3f85128 · Patch
• security.netapp.com/advisory/ntap-20230517-0006

libressl의 다른 취약점

• CVE-2023-35784심각 9.8A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL befo…
• CVE-2022-48437보통 5.3An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does…
• CVE-2021-41581보통 5.5x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When t…
• CVE-2019-25049높음 7.1LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).
• CVE-2019-25048높음 7.1LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print).