Summary Applications that use a non-default option to verify certificates may be vulnerable to an attack from a malicious CA. OpenSSL ignores Invalid certificate policies in leaf certificates. A malic...
Summary The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However, the implementation of the function do...
Summary OpenSSL is vulnerable to carefully crafted malicious X.509 certificate chains that include policy constraints. This triggers an exponential use of computational resources, leading to a denial-...
SamPirok
on:
Security Advisory: SA-2022-004 – Spring Framework
