← Database

CVE-2021-41581

MEDIUM CVSS: 5.5 Published: 2021-09-24 Modified: 2026-06-17

Description

x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAIN_PART_MAX_LEN, the buffer lacks '\0' termination.

Affected Platforms

Openbsd Libressl

Weakness Type

CWE-125

References