onyx --cves cve-2022-3786
CVE-2022-3786
- score
- <0.1
- cvss
- 7.5
- epss
- 92.5%
- published
- 2022-11-01
- kev added
- —
- first seen
A buffer overrun can be triggered in X.509 certificate verification during name constraint checking, caused by malicious email addresses in certificates, letting attackers cause crashes or denial of service, exploit requires either a maliciously signed certificate or continued verification despite failure.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC
Exploit availability
Public PoC flagged by vulnx; no direct exploit link among the citations.
Weaknesses
References 5
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c42165b5706e42f67ef8ef4c351a9a4c5d21639a
- https://www.openssl.org/news/secadv/20221101.txt
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00789.html
- https://www.kb.cert.org/vuls/id/794340
- https://cert-portal.siemens.com/productcert/html/ssa-408105.html