CVE-2015-5334
Critical
Description
Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (program crash) or possible execute arbitrary code via a crafted X.509 certificate, which triggers a stack-based buffer overflow. Note: this vulnerability exists because of an incorrect fix for CVE-2014-3508.
SeverityCritical
CVSS9.8
Exploit probability—
ProductOpenbsd Libressl
PublishedJan 23, 2020
First seenJan 23, 2020
How to fix
Update
- openbsd libressl2.3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openbsd libressl | v < 2.3.1 | 2.3.1 |
| opensuse opensuse | 13.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.