Описание
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 1.0.2g-1ubuntu13.2 |
| bionic | released | 1.0.2g-1ubuntu14 |
| cosmic | released | 1.0.2g-1ubuntu14 |
| devel | released | 1.0.2g-1ubuntu14 |
| disco | released | 1.0.2g-1ubuntu14 |
| esm-infra-legacy/trusty | not-affected | 1.0.1f-1ubuntu2.23 |
| esm-infra/bionic | not-affected | 1.0.2g-1ubuntu14 |
| esm-infra/xenial | not-affected | 1.0.2g-1ubuntu4.9 |
| precise/esm | not-affected | 1.0.1-4ubuntu5.40 |
| trusty | released | 1.0.1f-1ubuntu2.23 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needs-triage] |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE | trusty was needs-triage |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | DNE | |
| bionic | not-affected | 1.0.2n-1ubuntu4 |
| cosmic | not-affected | 1.0.2n-1ubuntu4 |
| devel | DNE | |
| disco | DNE | |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | not-affected | 1.0.2n-1ubuntu4 |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE |
Показывать по
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
While parsing an IPAddressFamily extension in an X.509 certificate, it ...
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3