12 matches found
p5-ssl-tools
SSLツールコレクション このリポジトリには、SSL/TLSに関連する問題のデバッグや解析を目的としたさまざまなツールが含まれています。 TLSの状態の解析 analyze-ssl.pl さまざまなSSL/TLSバージョンのサポートを確認 サポートされている暗号スイートを確認 証明書の検証 OCSPの状態を確認 SNIがサポートされているか、および/または必須かどうかを確認 チェーン証明書を表示し、証明書の検証が成功した場合はローカルルートも表示 直接接続およびさまざまな形式のSTARTTLSをサポート ... SMTP TLSサポート（STARTTLS） mxstarttlsbulk....
openssl: NULL Dereference in Certificate Verification with OCSP Checking
A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol OCSP response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggere...
openssl: NULL Dereference in Certificate Verification with OCSP Checking
A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol OCSP response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggere...
openssl: NULL Dereference in Certificate Verification with OCSP Checking
A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol OCSP response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggere...
openssl: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking
A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...
openssl: NULL Dereference in Certificate Verification with OCSP Checking
A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol OCSP response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggere...
CVE-2026-54876
Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per TLS handshake in a victim clien...
CVE-2026-54876 Client-Side Memory Leak in OCSP Response Checking
Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per TLS handshake in a victim clien...
CVE-2026-54876
CVE-2026-54876 describes a memory leak in TLS clients that enable OCSP response checking when interacting with a malicious TLS server. Specifically, if the server returns an OCSP response containing an empty BasicOCSPResponse (empty SEQUENCE OF SingleResponse), the OCSP_basicRESP structure alloca...
openssl: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking
A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...
CVE-2026-42765 NULL Dereference in Certificate Verification with OCSP Checking
Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. Impact summary: A NULL pointer dereference can...
CVE-2026-42765
CVE-2026-42765 describes a NULL dereference in certificate verification when OCSP response checking is enabled together with partial-chain verification. The issue triggers a crash (Denial of Service) if the verified chain lacks a self-signed trusted anchor, because for the last certificate the is...