Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qpch-gjf6-c9gf

Опубликовано: 25 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1
CVSS3: 5.3

Описание

A CRL critical extension bypass exists in ParseCRL_Extensions where critical extensions are not properly enforced, allowing a crafted CRL with an unhandled critical extension to be accepted. This only affects builds with CRL support enabled and where a crafted CRL had a trusted signature when parsed.

A CRL critical extension bypass exists in ParseCRL_Extensions where critical extensions are not properly enforced, allowing a crafted CRL with an unhandled critical extension to be accepted. This only affects builds with CRL support enabled and where a crafted CRL had a trusted signature when parsed.

EPSS

Процентиль: 8%
0.0018
Низкий

1 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 месяца назад

A CRL critical extension bypass exists in ParseCRL_Extensions where critical extensions are not properly enforced, allowing a crafted CRL with an unhandled critical extension to be accepted. This only affects builds with CRL support enabled and where a crafted CRL had a trusted signature when parsed.

CVSS3: 5.3
nvd
около 1 месяца назад

A CRL critical extension bypass exists in ParseCRL_Extensions where critical extensions are not properly enforced, allowing a crafted CRL with an unhandled critical extension to be accepted. This only affects builds with CRL support enabled and where a crafted CRL had a trusted signature when parsed.

msrc
30 дней назад

CRL critical extension bypass in ParseCRL_Extensions

CVSS3: 5.3
debian
около 1 месяца назад

A CRL critical extension bypass exists in ParseCRL_Extensions where cr ...

EPSS

Процентиль: 8%
0.0018
Низкий

1 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-295