|
1 | | -{ |
2 | | - "dataType": "CVE_RECORD", |
3 | | - "dataVersion": "5.2", |
4 | | - "cveMetadata": { |
5 | | - "cveId": "CVE-2026-5501", |
6 | | - "assignerOrgId": "50d2cd11-d01a-48ed-9441-5bfce9d63b27", |
7 | | - "state": "PUBLISHED", |
8 | | - "assignerShortName": "wolfSSL", |
9 | | - "dateReserved": "2026-04-03T15:46:09.302Z", |
10 | | - "datePublished": "2026-04-10T03:07:39.604Z", |
11 | | - "dateUpdated": "2026-04-22T13:59:28.514Z" |
12 | | - }, |
13 | | - "containers": { |
14 | | - "cna": { |
15 | | - "providerMetadata": { |
16 | | - "orgId": "50d2cd11-d01a-48ed-9441-5bfce9d63b27", |
17 | | - "shortName": "wolfSSL", |
18 | | - "dateUpdated": "2026-04-10T03:07:39.604Z" |
19 | | - }, |
20 | | - "title": "Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates", |
21 | | - "problemTypes": [ |
22 | | - { |
23 | | - "descriptions": [ |
24 | | - { |
25 | | - "lang": "en", |
26 | | - "cweId": "CWE-295", |
27 | | - "description": "CWE-295 Improper certificate validation", |
28 | | - "type": "CWE" |
29 | | - } |
30 | | - ] |
31 | | - } |
32 | | - ], |
33 | | - "affected": [ |
34 | | - { |
35 | | - "vendor": "wolfSSL", |
36 | | - "product": "wolfSSL", |
37 | | - "modules": [ |
38 | | - "wolfSSL_X509_verify_cert" |
39 | | - ], |
40 | | - "programFiles": [ |
41 | | - "src/x509_str.c" |
42 | | - ], |
43 | | - "versions": [ |
44 | | - { |
45 | | - "status": "affected", |
46 | | - "version": "0", |
47 | | - "lessThanOrEqual": "5.9.0", |
48 | | - "versionType": "semver" |
49 | | - } |
50 | | - ], |
51 | | - "defaultStatus": "unaffected" |
52 | | - } |
53 | | - ], |
54 | | - "descriptions": [ |
55 | | - { |
56 | | - "lang": "en", |
57 | | - "value": "wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Constraints `CA:FALSE` that is legitimately signed by a trusted root. An attacker who obtains any leaf certificate from a trusted CA (e.g. a free DV cert from Let's Encrypt) can forge a certificate for any subject name with any public key and arbitrary signature bytes, and the function returns `WOLFSSL_SUCCESS` / `X509_V_OK`. The native wolfSSL TLS handshake path (`ProcessPeerCerts`) is not susceptible and the issue is limited to applications using the OpenSSL compatibility API directly, which would include integrations of wolfSSL into nginx and haproxy.", |
58 | | - "supportingMedia": [ |
59 | | - { |
60 | | - "type": "text/html", |
61 | | - "base64": false, |
62 | | - "value": "wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Constraints `CA:FALSE` that is legitimately signed by a trusted root. An attacker who obtains any leaf certificate from a trusted CA (e.g. a free DV cert from Let's Encrypt) can forge a certificate for any subject name with any public key and arbitrary signature bytes, and the function returns `WOLFSSL_SUCCESS` / `X509_V_OK`. The native wolfSSL TLS handshake path (`ProcessPeerCerts`) is not susceptible and the issue is limited to applications using the OpenSSL compatibility API directly, which would include integrations of wolfSSL into nginx and haproxy." |
63 | | - } |
64 | | - ] |
65 | | - } |
66 | | - ], |
67 | | - "references": [ |
68 | | - { |
69 | | - "url": "https://github.com/wolfSSL/wolfssl/pull/10102" |
70 | | - } |
71 | | - ], |
72 | | - "metrics": [ |
73 | | - { |
74 | | - "format": "CVSS", |
75 | | - "scenarios": [ |
76 | | - { |
77 | | - "lang": "en", |
78 | | - "value": "GENERAL" |
79 | | - } |
80 | | - ], |
81 | | - "cvssV4_0": { |
82 | | - "attackVector": "NETWORK", |
83 | | - "attackComplexity": "LOW", |
84 | | - "attackRequirements": "NONE", |
85 | | - "privilegesRequired": "LOW", |
86 | | - "userInteraction": "NONE", |
87 | | - "vulnConfidentialityImpact": "HIGH", |
88 | | - "subConfidentialityImpact": "NONE", |
89 | | - "vulnIntegrityImpact": "HIGH", |
90 | | - "subIntegrityImpact": "NONE", |
91 | | - "vulnAvailabilityImpact": "NONE", |
92 | | - "subAvailabilityImpact": "NONE", |
93 | | - "exploitMaturity": "NOT_DEFINED", |
94 | | - "Safety": "NOT_DEFINED", |
95 | | - "Automatable": "NOT_DEFINED", |
96 | | - "Recovery": "NOT_DEFINED", |
97 | | - "valueDensity": "NOT_DEFINED", |
98 | | - "vulnerabilityResponseEffort": "NOT_DEFINED", |
99 | | - "providerUrgency": "NOT_DEFINED", |
100 | | - "version": "4.0", |
101 | | - "baseSeverity": "HIGH", |
102 | | - "baseScore": 8.6, |
103 | | - "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" |
104 | | - } |
105 | | - } |
106 | | - ], |
107 | | - "credits": [ |
108 | | - { |
109 | | - "lang": "en", |
110 | | - "value": "Calif.io in collaboration with Claude and Anthropic Research", |
111 | | - "type": "finder" |
112 | | - } |
113 | | - ], |
114 | | - "source": { |
115 | | - "discovery": "EXTERNAL" |
116 | | - }, |
117 | | - "x_generator": { |
118 | | - "engine": "Vulnogram 1.0.1" |
119 | | - } |
120 | | - } |
121 | | - } |
122 | | -} |
| 1 | +{ |
| 2 | + "dataType": "CVE_RECORD", |
| 3 | + "dataVersion": "5.2", |
| 4 | + "cveMetadata": { |
| 5 | + "cveId": "CVE-2026-5501", |
| 6 | + "assignerOrgId": "50d2cd11-d01a-48ed-9441-5bfce9d63b27", |
| 7 | + "state": "PUBLISHED", |
| 8 | + "assignerShortName": "wolfSSL", |
| 9 | + "dateReserved": "2026-04-03T15:46:09.302Z", |
| 10 | + "datePublished": "2026-04-10T03:07:39.604Z", |
| 11 | + "dateUpdated": "2026-04-22T13:59:28.514Z" |
| 12 | + }, |
| 13 | + "containers": { |
| 14 | + "cna": { |
| 15 | + "providerMetadata": { |
| 16 | + "orgId": "50d2cd11-d01a-48ed-9441-5bfce9d63b27", |
| 17 | + "shortName": "wolfSSL", |
| 18 | + "dateUpdated": "2026-04-10T03:07:39.604Z" |
| 19 | + }, |
| 20 | + "title": "Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates", |
| 21 | + "problemTypes": [ |
| 22 | + { |
| 23 | + "descriptions": [ |
| 24 | + { |
| 25 | + "lang": "en", |
| 26 | + "cweId": "CWE-295", |
| 27 | + "description": "CWE-295 Improper certificate validation", |
| 28 | + "type": "CWE" |
| 29 | + } |
| 30 | + ] |
| 31 | + } |
| 32 | + ], |
| 33 | + "affected": [ |
| 34 | + { |
| 35 | + "vendor": "wolfSSL", |
| 36 | + "product": "wolfSSL", |
| 37 | + "modules": [ |
| 38 | + "wolfSSL_X509_verify_cert" |
| 39 | + ], |
| 40 | + "programFiles": [ |
| 41 | + "src/x509_str.c" |
| 42 | + ], |
| 43 | + "versions": [ |
| 44 | + { |
| 45 | + "status": "affected", |
| 46 | + "version": "0", |
| 47 | + "lessThanOrEqual": "5.9.0", |
| 48 | + "versionType": "semver" |
| 49 | + } |
| 50 | + ], |
| 51 | + "defaultStatus": "unaffected" |
| 52 | + } |
| 53 | + ], |
| 54 | + "descriptions": [ |
| 55 | + { |
| 56 | + "lang": "en", |
| 57 | + "value": "wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Constraints `CA:FALSE` that is legitimately signed by a trusted root. An attacker who obtains any leaf certificate from a trusted CA (e.g. a free DV cert from Let's Encrypt) can forge a certificate for any subject name with any public key and arbitrary signature bytes, and the function returns `WOLFSSL_SUCCESS` / `X509_V_OK`. The native wolfSSL TLS handshake path (`ProcessPeerCerts`) is not susceptible and the issue is limited to applications using the OpenSSL compatibility API directly, which would include integrations of wolfSSL into nginx and haproxy.", |
| 58 | + "supportingMedia": [ |
| 59 | + { |
| 60 | + "type": "text/html", |
| 61 | + "base64": false, |
| 62 | + "value": "wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Constraints `CA:FALSE` that is legitimately signed by a trusted root. An attacker who obtains any leaf certificate from a trusted CA (e.g. a free DV cert from Let's Encrypt) can forge a certificate for any subject name with any public key and arbitrary signature bytes, and the function returns `WOLFSSL_SUCCESS` / `X509_V_OK`. The native wolfSSL TLS handshake path (`ProcessPeerCerts`) is not susceptible and the issue is limited to applications using the OpenSSL compatibility API directly, which would include integrations of wolfSSL into nginx and haproxy." |
| 63 | + } |
| 64 | + ] |
| 65 | + } |
| 66 | + ], |
| 67 | + "references": [ |
| 68 | + { |
| 69 | + "url": "https://github.com/wolfSSL/wolfssl/pull/10102" |
| 70 | + } |
| 71 | + ], |
| 72 | + "metrics": [ |
| 73 | + { |
| 74 | + "format": "CVSS", |
| 75 | + "scenarios": [ |
| 76 | + { |
| 77 | + "lang": "en", |
| 78 | + "value": "GENERAL" |
| 79 | + } |
| 80 | + ], |
| 81 | + "cvssV4_0": { |
| 82 | + "attackVector": "NETWORK", |
| 83 | + "attackComplexity": "LOW", |
| 84 | + "attackRequirements": "NONE", |
| 85 | + "privilegesRequired": "LOW", |
| 86 | + "userInteraction": "NONE", |
| 87 | + "vulnConfidentialityImpact": "HIGH", |
| 88 | + "subConfidentialityImpact": "NONE", |
| 89 | + "vulnIntegrityImpact": "HIGH", |
| 90 | + "subIntegrityImpact": "NONE", |
| 91 | + "vulnAvailabilityImpact": "NONE", |
| 92 | + "subAvailabilityImpact": "NONE", |
| 93 | + "exploitMaturity": "NOT_DEFINED", |
| 94 | + "Safety": "NOT_DEFINED", |
| 95 | + "Automatable": "NOT_DEFINED", |
| 96 | + "Recovery": "NOT_DEFINED", |
| 97 | + "valueDensity": "NOT_DEFINED", |
| 98 | + "vulnerabilityResponseEffort": "NOT_DEFINED", |
| 99 | + "providerUrgency": "NOT_DEFINED", |
| 100 | + "version": "4.0", |
| 101 | + "baseSeverity": "HIGH", |
| 102 | + "baseScore": 8.6, |
| 103 | + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N" |
| 104 | + } |
| 105 | + } |
| 106 | + ], |
| 107 | + "credits": [ |
| 108 | + { |
| 109 | + "lang": "en", |
| 110 | + "value": "Calif.io in collaboration with Claude and Anthropic Research", |
| 111 | + "type": "finder" |
| 112 | + } |
| 113 | + ], |
| 114 | + "source": { |
| 115 | + "discovery": "EXTERNAL" |
| 116 | + }, |
| 117 | + "x_generator": { |
| 118 | + "engine": "Vulnogram 1.0.1" |
| 119 | + } |
| 120 | + } |
| 121 | + } |
| 122 | +} |
0 commit comments