Daniel Kubec

**Name of the Vulnerable Software and Affected Versions** OpenSSL (affected versions not specified) **Description** An issue exists in the Certificate Management Protocol (CMP) password-based MAC protection verification. The library uses the `X509 ALGOR get0()` function to read the `protectionAlg` algorithm parameter, which returns a parameter type and a value pointer. The system casts this value to an `ASN1 STRING` and treats it as a `PBMParameter` after verifying only that the pointer is not NULL, failing to consult the actual parameter type. A remote, unauthenticated attacker can send a crafted message containing a parameter of a different type, leading to an invalid pointer dereference. This can result in a Denial of Service (DoS) by crashing applications acting as CMP servers that accept PBM-protected messages, or CMP clients interacting with a malicious or intercepted server. This occurs within the `OSSL CMP SRV process request()` function on the server side and during response validation on the client side. This issue requires the CMP feature to be explicitly enabled. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenSSL versions prior to 3.0.22 OpenSSL versions prior to 3.4.7 OpenSSL versions prior to 3.5.8 OpenSSL versions prior to 3.6.4 OpenSSL versions prior to 4.0.2 OpenSSL version 1.1.1 **Description** An 8-byte out-of-bounds heap write occurs during CMS decryption when the key-unwrap output buffer is sized based on the queried unwrapped key size, but the AES-WRAP-PAD unwrap primitive writes more bytes than reported. An attacker can trigger this by supplying a crafted CMS message and modifying a single OID byte to select the padded variant. This leads to heap corruption and typically results in a Denial of Service. The issue is reachable via the `CMS decrypt()` function. **Recommendations** Upgrade to version 3.0.22. Upgrade to version 3.4.7. Upgrade to version 3.5.8. Upgrade to version 3.6.4. Upgrade to version 4.0.2. As a temporary workaround, restrict the use of the `CMS decrypt()` function when processing untrusted CMS messages.

**Name of the Vulnerable Software and Affected Versions** OpenSSL (affected versions not specified) **Description** A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the `status request` extension. This triggers a double-free in the client's certificate verification path when the stapled response is checked. A double-free occurs when a program attempts to free the same memory location twice, which can corrupt heap memory. This may lead to a Denial of Service, attacker-controlled code execution, or other undefined behavior. OCSP stapling is not enabled by default. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling OCSP stapling to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OpenSSL (affected versions not specified) **Description** A NULL pointer dereference occurs when partial-chain certificate verification is enabled alongside OCSP response checking for the entire chain, provided the verified chain lacks a self-signed trusted anchor. This happens because the code attempts to access the next certificate as the issuer, but the issuer remains NULL for the final certificate in the chain under these specific conditions. This can lead to a process crash and a subsequent Denial of Service. The issue specifically affects applications that enable both the `X509 V FLAG OCSP RESP CHECK ALL` and `X509 V FLAG PARTIAL CHAIN` flags, both of which are disabled by default. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid enabling both `X509 V FLAG OCSP RESP CHECK ALL` and `X509 V FLAG PARTIAL CHAIN` flags simultaneously during certificate verification.