CVE-2026-111458

Name of the Vulnerable Software and Affected Versions ssldump (affected versions not specified)

Description A heap-based buffer overflow occurs in the fanx fingerprint() function within the ssl/sslxprint.c file. The issue arises from a miscalculation of the required buffer size when formatting FAN/1 X.509 certificate fingerprints; the allocation uses a fixed value of 31 bytes, while the format string actually requires 34 bytes including the null terminator. Because sprintf writes the formatted string without bounds checking, a 3-byte overflow occurs on every invocation with valid inputs. An attacker can trigger this by providing a crafted pcap file containing a TLS X.509 certificate to a user running the tool with FAN/1 fingerprinting enabled. This heap corruption can lead to a denial of service via a crash or potentially allow arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, avoid running the tool with FAN/1 fingerprinting enabled, such as by not using the -j and -N options.