Skip to content
Threat Feed

Product

Openssl (>= 0.9.7, < 0.10.79)

1 brief RSS
high advisory

rust-openssl X509Ref::ocsp_responders Undefined Behavior Vulnerability

The `X509Ref::ocsp_responders` function in rust-openssl versions 0.9.7 to 0.10.78 returns OCSP responder URLs from a certificate's AIA extension without proper UTF-8 validation, leading to undefined behavior when processing certificates with non-UTF-8 OCSP URLs.

openssl vulnerability rust certificate
2r 1t