CVE-2021-46880
Critical
Description
x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded.
SeverityCritical
CVSS9.8
Exploit probability—
ProductOpenbsd Libressl
PublishedApr 15, 2023
First seenApr 15, 2023
Weakness typeCWE-295CWE-295
How to fix
Update
- openbsd libressl3.4.2 or later
- openbsd openbsd7.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openbsd libressl | v < 3.4.2 | 3.4.2 |
| openbsd openbsd | v < 7.0 | 7.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.