Issue summary: When a partial-chain certificate verification is enabled
\ntogether with OCSP response checking for the whole chain, a NULL dereference
\nwill happen if the verified chain does not have a self-signed trusted anchor,
\ncrashing the process.<\/p>\n
Impact summary: A NULL pointer dereference can trigger a crash which leads to a
\nDenial of Service for an application.<\/p>\n
When performing OCSP response checking for certificates in the verification
\nchain, the code always tries to access the next certificate as the issuer.
\nThere is a check for a self-signed certificate. However with the partial
\nchain verification enabled when the chain does not have a self-signed trusted
\nanchor, the issuer will be NULL for the last certificate in the chain. A NULL
\npointer dereference then happens.<\/p>\n
This issue affects only applications which enable both OCSP verification
\nof the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial
\nchain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate
\nverification. Both flags are disabled by default. For that reason, we have
\nassigned Low severity to the issue.<\/p>\n
No FIPS modules are affected by this issue as the affected code is outside
\nthe OpenSSL FIPS module boundary.<\/p>\n","protected":false},"excerpt":{"rendered":"
Issue summary: When a partial-chain certificate verification is enabled
\ntogether with OCSP response checking for the whole chain, a NULL dereference
\nwill happen if the verified chain does not have a s<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-16171","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/16171","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16171"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16171"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}