Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-frhw-mqj2-wxw2

Опубликовано: 30 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Due to the design of the name constraint checking algorithm, the processing time of some inputs scals non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

Due to the design of the name constraint checking algorithm, the processing time of some inputs scals non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

EPSS

Процентиль: 35%
0.00406
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-407

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 года назад

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

CVSS3: 5.3
redhat
около 1 года назад

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

CVSS3: 7.5
nvd
около 1 года назад

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

msrc
около 1 года назад

Quadratic complexity when checking name constraints in crypto/x509

CVSS3: 7.5
debian
около 1 года назад

Due to the design of the name constraint checking algorithm, the proce ...

EPSS

Процентиль: 35%
0.00406
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-407