stunnel: client certificate not correctly verified when redirect and verifyChain options are used

A flaw was found in stunnel, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options. This flaw allows an attacker with a certificate signed by a Certificate Authority, which is not the one accepted by the stunnel server, to access the...

Stunnel Trust Management Issues Vulnerabilities

MichałTrojnara Stunnel is a MichałTrojnara open source application. It provides TLS encryption functionality to be added to existing clients and servers without requiring changes to the program code. A trust management issue vulnerability exists in Stunnel, which arises from client certificates n...

PT-2021-13852 · Stunnel +9 · Stunnel +9

Name of the Vulnerable Software and Affected Versions: stunnel versions prior to 5.57 Description: A flaw was found in stunnel where it improperly validates client certificates when it is configured to use both redirect and verifyChain options. This flaw allows an attacker with a certificate sign...

The vulnerability of the OpenSMTPD mail daemon on the Fedora operating system allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the OpenSMTPD mail daemon in the Fedora operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code using the structures reqcavrfysmtp, reqcavrfymta, and...