CVE-2022-48437
Medium
Description
An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate.
SeverityMedium
CVSS5.3
Exploit probability—
ProductOpenbsd Libressl
PublishedApr 12, 2023
First seenApr 12, 2023
Weakness typeCWE-295CWE-295
How to fix
Update
- openbsd libressl3.6.1 or later
- openbsd openbsd7.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openbsd libressl | v < 3.6.1 | 3.6.1 |
| openbsd openbsd | v < 7.2 | 7.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.