`openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read · GHSA-9qwg-crg9-m2vc · GitHub Advisory Database · GitHub

`openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read

High severity GitHub Reviewed Published Mar 24, 2023 to the GitHub Advisory Database • Updated Mar 24, 2023

Package

openssl (Rust)

Affected versions

>= 0.9.7, < 0.10.48

Patched versions

0.10.48

Description

SubjectAlternativeName and ExtendedKeyUsage arguments were parsed using the OpenSSL function X509V3_EXT_nconf. This function parses all input using an OpenSSL mini-language which can perform arbitrary file reads.

Thanks to David Benjamin (Google) for reporting this issue.

References

Published to the GitHub Advisory Database Mar 24, 2023

Reviewed Mar 24, 2023

Last updated Mar 24, 2023