Threats tagged 'ghsa-56qc-c576-qq46'

LibreSSL's ocspcheck utility up to version 4.4.0 has a vulnerability where OCSP requests can be transmitted in cleartext when sent to HTTPS responder URLs on non-standard ports. This occurs because the function url2host() removes the OCSP URL scheme, and http_alloc() only uses TLS for port 443, leading to unencrypted transmission on other ports. As a result, on-path attackers can intercept OCSP requests and access sensitive certificate information such as serial numbers, issuer hashes, and nonces.