![]() For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. One of those name types is known as EDIPartyName. ![]() ![]() The X.509 GeneralName type is a generic type for representing different types of names. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |