Unrated
openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean retur...
CVE-2020-9434
First seen on SecPulse
References
- patch github.com