mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-07-30 16:26:33 +08:00
16 lines
856 B
Plaintext
16 lines
856 B
Plaintext
Security
|
|
* Fix two bugs in the X.509 certificate parser that caused some inputs
|
|
with a malformed basicConstraints extension to be accepted. This
|
|
could have dangerous results, in particular causing some certificates
|
|
to be parsed as CA certificates when other X.509 implementations would
|
|
parse them as end-entity certificates. Reported by Mohammad Seet
|
|
(mhdsait101), Pablo Ruiz García and NVIDIA Project Vanessa. CVE-2026-49300
|
|
|
|
Changes
|
|
* X.509 certificates with a basicConstraints extension starting with an
|
|
INTEGER field are no longer accepted. According to RFC 5280, such
|
|
certificates are syntactically valid and the first field is the
|
|
pathLenConstraint value, but certificate authorities must not emit such
|
|
certificates. Mbed TLS interpreted it as a cA value, which was nonstandard
|
|
and dangerous.
|