CVE-2026-118371

LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSPsendreqnew and OCSPparseurl functions, which write unvalidated request paths into the OCSP POST request line. Attackers can embed carriage return and line feed characters in a certificate's Authority Information...

CVE-2026-118371 LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line

LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSPsendreqnew and OCSPparseurl functions, which write unvalidated request paths into the OCSP POST request line. Attackers can embed carriage return and line feed characters in a certificate's Authority Information...

CVE-2026-118371 LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line

LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSPsendreqnew and OCSPparseurl functions, which write unvalidated request paths into the OCSP POST request line. Attackers can embed carriage return and line feed characters in a certificate's Authority Information...

CVE-2026-118371

LibreSSL versions through 4.4.0 are vulnerable to a CRLF injection vulnerability in the libcrypto library. The flaw resides in the OCSP_sendreq_new() and OCSP_parse_url() functions, which fail to validate request paths before writing them into the OCSP POST request line. An attacker can exploit t...

EUVD-2026-111547

LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSPsendreqnew and OCSPparseurl functions, which write unvalidated request paths into the OCSP POST request line. Attackers can embed carriage return and line feed characters in a certificate's Authority Information...