CVE-2022-3786 and CVE-2022-3602: X.509 Email Address Buffer Overflows

For Developers
1

Is OpenWrt 22.03.2 (and other versions) vulnerable for CVE-2022-3786 and CVE-2022-3602: X.509 Email Address Buffer Overflows?
https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/

Thx Ramon

2
3

ok i didnt see that one. So if its not using it by default then that should be good. Would still be good to fix though.

Thx

4

Note that this vulnerability was present in the OpenSSL 3.0.x release series while OpenWrt packages OpenSSL 1.1.1 which was not affected.

4 Likes
5

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.