Read the docs
Red Hat Security Advisory

RHSA-2022:7288

openssl security update

Released 2022-11-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

Priority HIGH 82

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.92488 Published 2022-11-01 Partial fix · 3.0.7, 300.0.11 CWE-120
TI-2022-03315 CVE-2022-3602 · GHSA-8rwr-x37p-mx23

X.509 Email Address 4-byte Buffer Overflow

Priority HIGH 82

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.9077 Published 2022-11-01 Fixed in 300.0.11 CWE-787