Skip to content
OpenAdvisories

Product · OpenBSD

LibreSSL

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response

    LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhaust memory by sending unbounded HTTP responses. Attackers controlling the responder or intercepting plain HTTP AIA OCSP traffic can stream…