CVE-2020-9433

CVE-2020-9433 affects lua-openssl 0.7.7-1, where openssl_x509_check_email mishandles X.509 certificate validation because it uses lua_pushboolean for non-boolean return values. This is the stated root cause; no explicit remediation is provided in the documents. Affected/related entries in the con...

CVE-2020-9432

The CVE-2020-9432 issue affects lua-openssl, specifically the openssl_x509_check_host function in version 0.7.7-1. The root cause is that it mis-handles X.509 certificate validation by using lua_pushboolean for non-boolean return values, which can lead to incorrect validation results. Connected s...

CVE-2020-9434

The CVE-2020-9434 issue affects lua-openssl 0.7.7-1, where openssl_x509_check_ip_asc mishandles X.509 certificate validation by returning non-boolean values through lua_pushboolean. Root cause: a mismatch in return type handling during certificate validation, leading to incorrect validation resul...