7 matches found
AZL-103524 CVE-2026-93602 affecting package rust-afterburn 5.8.2-2
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can...
CVE-2026-93602
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain a faulty CRL revocation-checking logic: the authority-matching compares only the first distributionPoint against each CRL's IssuingDistributionPoint , ignoring additional distributionPoints. An attacker who controls a compromised ...
PT-2026-99975
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can...
CVE-2026-93602: Improper Check for Certificate Revocation
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can...
PT-2026-99978
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can...
PT-2026-99982
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can...
PT-2026-95381
Name of the Vulnerable Software and Affected Versions rustls-webpki versions prior to 0.103.10 rustls-webpki versions prior to 0.104.0-alpha.5 Description Faulty CRL Certificate Revocation List authority-matching logic occurs when a certificate contains multiple distributionPoint entries. The...