Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5jqq-xpcr-q3r7

Опубликовано: 10 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 4.3

Описание

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

EPSS

Процентиль: 2%
0.00122
Низкий

2.3 Low

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 4.3
ubuntu
4 месяца назад

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

CVSS3: 4.3
nvd
4 месяца назад

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

msrc
4 месяца назад

1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore

CVSS3: 4.3
debian
4 месяца назад

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_not ...

EPSS

Процентиль: 2%
0.00122
Низкий

2.3 Low

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-122