CVE-2018-8970

    Dashboard / Vulnerabilities / CVE-2018-8970

    CVE-2018-8970

    Published: 24 Mar 2018Last Modified: 27 Aug 2026

    Summary:

    Details: The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zero name length, which causes silent omission of hostname verification, and consequently allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: the LibreSSL documentation indicates that this special case is supported, but the BoringSSL documentation does not.

    References: https://boringssl.googlesource.com/boringssl/+/e759a9cd84198613199259dbed401f4951747cff, https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.7.1-relnotes.txt, https://github.com/libressl-portable/openbsd/commit/0654414afcce51a16d35d05060190a3ec4618d42

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -0654414afcce51a16d35d05060190a3ec4618d42

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High