x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAIN_PART_MAX_LEN, the buffer lacks '\0' termination.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/libressl-portable/openbsd/issues/126 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-09-24T02:12:33
Updated: 2024-08-04T03:15:29.047Z
Reserved: 2021-09-24T00:00:00
Link: CVE-2021-41581
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-09-24T03:15:06.567
Modified: 2024-11-21T06:26:27.990
Link: CVE-2021-41581
Redhat
No data.