The vulnerability in the implementation of the OCSP_basic_verify() function in the OpenSSL library allows a perpetrator to carry out a type of “man-in-the-middle” attack.

The vulnerability in the implementation of the OCSPbasicverify function in the OpenSSL library is related to errors in the certificate validation process when the OCSPNOCHECKS flag is used. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...