Integer Overflow in Certificate Chain Allocation
Résumé
Integer Overflow in Certificate Chain Allocation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssl_add_to_chain is called by these API: wolfSSL_CTX_add_extra_chain_cert, wolfSSL_CTX_add1_chain_cert, wolfSSL_add0_chain_cert. These API are enabled for 3rd party compatibility features: enable-opensslall, enable-opensslextra, enable-lighty, enable-stunnel, enable-nginx, enable-haproxy. This issue is not remotely exploitable, and would require that the application context loading certificates is compromised.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-3229 wolfssl
- Ubuntu UBUNTU-CVE-2026-3229 wolfssl
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com