OpenSSL CVE-2022-3602 Out of Bounds Write Vulnerability

Description

Buffer overflow in X.509 name constraint checking during certificate verification can cause denial of service or remote code execution in OpenSSL 3.0.0-3.0.6.

Outbreak Alert

An attacker can craft a malicious email address to overflow four attacker-controlled bytes on the stack in X.509 certificate verification, specifically, in name constraint checking. This buffer overflow could result in a crash which can cause a denial of service or potentially a remote code execution.

View the full Outbreak Alert Report

Affected Applications

OpenSSL

References