Description
The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | stunnel4 | 3:4.22-1.1 | — |
| Debian 12 | stunnel4 | 3:4.22-1.1 | — |
References
- 30425 third-party-advisory
- stunnel-ocsp-security-bypass(42528) vdb-entry
- FEDORA-2008-4606 vendor-advisory
- ADV-2008-1569 vdb-entry
- 30335 third-party-advisory
- 31438 third-party-advisory
- FEDORA-2008-4531 vendor-advisory
- MDVSA-2008:168 vendor-advisory
- [stunnel-announce] 20080519 stunnel 4.24 released mailing-list
- FEDORA-2008-4579 vendor-advisory
- GLSA-200808-08 vendor-advisory
- 29309 vdb-entry