Improper Certificate Validation

Overview io.netty:netty-handler-ssl-ocsp is a Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. Affected versions of this package are vulnerable to Improper Certificate Validation in the...

PT-2026-63259

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description The OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to a replay attac...

EUVD-2015-6931

Malware in sbrugna...

CVE-2015-6999

Affected software: Apple iOS prior to 9.1. The OCSP client fails to check certificate expiry, allowing a revoked certificate to appear valid and enabling remote spoofing of certificates. Root cause: OCSP expiry check not performed. Impact: potential trust compromise and spoofed TLS certificates. ...

CVE-2015-6999

The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate...