Threat Advisory: High Severity OpenSSL Vulnerabilities
Summary: Cisco Talos reported two buffer overflow vulnerabilities, CVE-2022-3602 and CVE-2022-3786, in OpenSSL versions 3.0.0 through 3.0.6, triggered by an X.509 certificate with a specially crafted email address in the id-on-SmtpUTF8Mailbox field. CVE-2022-3602 is a 4-byte overflow (single unsigned int overwrite) and CVE-2022-3786 is a variable-length overflow variant, both capable of causing a crash or potential remote code execution on a vulnerable client or server.
Why it matters: These flaws can hit both client and server, unlike most vulnerabilities that affect one side, so a malicious server can compromise a connecting client and a malicious client can compromise a server that requests authentication. OpenSSL 3.0.x ships in some major Linux distributions, and the fix is upgrading to version 3.0.7.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-3602CVE-2022-3786
- Related