RUSTSEC-2022-0065

    Dashboard / Vulnerabilities / RUSTSEC-2022-0065

    RUSTSEC-2022-0065

    Published: 1 Nov 2022Last Modified: 16 Dec 2024

    Summary: X.509 Email Address Variable Length Buffer Overflow

    Details: A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.` character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.

    References: https://crates.io/crates/openssl-src, https://rustsec.org/advisories/RUSTSEC-2022-0065.html, https://www.openssl.org/news/secadv/20221101.txt

    Affected packages

    Package

    Name: openssl-src

    Purl: pkg:cargo/openssl-src

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 300.0.0
    Fixed -300.0.11

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    RUSTSEC-2022-0065 | CVE-DB