Threats tagged 'ghsa-5qhg-9pm8-2mwp'

LibreSSL ocspcheck versions through 4.4.0 have a CRLF injection vulnerability that allows attackers to inject HTTP headers by embedding carriage return and line feed sequences in a certificate's AIA OCSP URI path. This occurs because the function url2host() copies the URI path without filtering control characters, and http_open() includes this path in the POST request line, enabling header injection or request splitting to the OCSP responder.