CVE-2025-7395
Domain Name Validation Bypass with Apple Native Certificate Validation
Résumé
Domain Name Validation Bypass with Apple Native Certificate Validation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL
client failing to properly verify the server certificate's domain name,
allowing any certificate issued by a trusted CA to be accepted regardless of the hostname.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Ubuntu UBUNTU-CVE-2025-7395 wolfssl
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- package github.com