CVE-2026-3548
Buffer overflow in CRL number parsing in wolfSSL
概要
Buffer overflow in CRL number parsing in wolfSSL
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when improperly storing the CRL number as a hexadecimal string, and a stack-based overflow for sufficiently sized CRL numbers. With appropriately crafted CRLs, either of these out of bound writes could be triggered. Note this only affects builds that specifically enable CRL support, and the user would need to load a CRL from an untrusted source.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2026-3548 wolfssl
- Ubuntu UBUNTU-CVE-2026-3548 wolfssl
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web wolfssl.com