CVE-2026-3229
Integer Overflow in Certificate Chain Allocation
概要
Integer Overflow in Certificate Chain Allocation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssl_add_to_chain is called by these API: wolfSSL_CTX_add_extra_chain_cert, wolfSSL_CTX_add1_chain_cert, wolfSSL_add0_chain_cert. These API are enabled for 3rd party compatibility features: enable-opensslall, enable-opensslextra, enable-lighty, enable-stunnel, enable-nginx, enable-haproxy. This issue is not remotely exploitable, and would require that the application context loading certificates is compromised.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2026-3229 wolfssl
- Ubuntu UBUNTU-CVE-2026-3229 wolfssl
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com