CRL Distribution Point Scope Check Logic Error in AWS-LC

A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs with Issuing Distribution Point IDP extensions. Customers of AWS services do not...

PT-2026-26369

Name of the Vulnerable Software and Affected Versions AWS-LC versions prior to 1.71.0 aws-lc-sys versions 0.15.0 through 0.39.0 aws-lc-fips-sys versions 0.13.0 through 0.13.13 Description A logic error in CRL distribution point validation in AWS-LC allows a revoked certificate to bypass revocatio...

CVE-2026-4428: Improper Check for Certificate Revocation

A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upgrade to AWS-LC 1.71.0 or...

wolfSSL (CyaSSL) security vulnerabilities

wolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the American company wolfSSL, aimed at developers working with embedded systems. wolfSSL CyaSSL has security vulnerabilities; these vulnerabilities stem from two buffer overflow vulnerabilities in the CRL parser’s...

AWS libcrypto security vulnerabilities

AWS libcrypto is a general-purpose encryption library open sourced by Amazon Web Services. Prior to version 1.71.0 of AWS libcrypto, there was a security vulnerability. This vulnerability stemmed from a logical error in the CRL distribution point validation process, which incorrectly rejected CRL...

CVE-2026-3548: Out-of-bounds Write

Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when improperly storing the CRL number as a hexadecimal string, and a stack-based overflow for sufficiently sized CRL numbers. With appropriately crafted CRLs,...

Linux Distros Unpatched Vulnerability : CVE-2026-3548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap- based buffer overflow could occur when improperly storin...

Security Bulletin: Vulnerability in openssl and openssl-libs affects IBM Db2 Data Management Console .

Summary openssl and openssl-libs open source library is used by IBM Db2 Data Management Console . This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID:CVE-2023-0286 DESCRIPTION: There is a type confusion vulnerability relating to X.400 address...

authx (0.1.4), carml (>=21.0.0, <=21.1.0) +19 more potentially affected by CVE-2026-26007 via cryptography (36.0.0)

cryptography PYPI version 36.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - authx 0.1.4 - carml =21.0.0, =0.2.2, =0.0.2, =1.0.0, =0.0.3, =0.19.0, =0.9.0, =1.0.10, =1.0.2, =0.7.0, =0.8.4 and more Source cves:...

MongoDB 5.0.x < 5.0.31 / 6.0.x < 6.0.20 / 7.0.x < 7.0.16 / 8.0.x < 8.0.4 Improper Check for Certificate Revocation (SERVER-95445)

The version of MongoDB installed on the remote host is 5.0 prior to 5.0.31, 6.0 prior to 6.0.20, 7.0 prior to 7.0.16 and 8.0 prior to 8.0.4. It is, therefore, affected by a vulnerability as referenced in the SERVER-95445 advisory. - A MongoDB server under specific conditions running on Linux with...

crl-datacube (0.1.13) potentially affected by CVE-2026-23528 via distributed (2024.11.0)

distributed PYPI version 2024.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - crl-datacube 0.1.13 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

cellxgene-schema (5.3.0), crl-datacube (0.1.56) potentially affected by CVE-2026-23528 via distributed (2024.12.0)

distributed PYPI version 2024.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cellxgene-schema 5.3.0 - crl-datacube 0.1.56 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

crl-datacube (0.1.13) potentially affected by CVE-2026-23528 via distributed (2024.11.0)

distributed PYPI version 2024.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - crl-datacube 0.1.13 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...

MiracleLinux 4 : openssl-1.0.0-20.AXS4 (AXSA:2012-14:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-14:01 advisory. The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which...

PT-2026-26327

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description The software contains buffer overflow issues within its Certificate Revocation List CRL parser when processing CRL numbers. A heap-based buffer overflow can occur during the improper storage ...

PT-2025-48506

An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock...

PT-2025-48507

An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls x509 crl parse der has a buffer over-read of one byte...

TencentOS Server 3: compat-openssl10 (TSSA-2025:0443)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0443 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

ProFTPD FTP Server Zero Pointer Swap DoS

The vulnerability of the ProFTPD FTP server is related to the zero pointer assignment in the tlsverifycrl function. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20251022-03

ProFTPD FTP server vulnerability is related to a null pointer dereferencing error in the function tlsverifycrl in ProFTPD when processing data returned by OpenSSL function skX509REVOKEDvalue when detecting an empty certificate revocation list set by the system administrator. Exploitation of the...