CVE-2026-5188
Integer underflow in X.509 SAN parsing in wolfSSL
概要
Integer underflow in X.509 SAN parsing in wolfSSL
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect handling of certificate data. The issue is limited to configurations using the original ASN.1 parsing implementation which is off by default.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2026-5188 wolfssl
- Ubuntu UBUNTU-CVE-2026-5188 wolfssl
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com