Leaf Certificate Verification Flaw in LibreSSL and OpenBSD

CVE-2022-48437

What is CVE-2022-48437?

A flaw exists in the leaf certificate verification process within LibreSSL and OpenBSD, specifically related to x509/x509_verify.c. When the function x509_verify_ctx_add_chain encounters an error during verification, it fails to properly log the error, resulting in inappropriate error messages being returned. This issue is exacerbated when a verification callback is in place, which instructs the verifier to continue processing upon facing an invalid certificate, potentially compromising certificate trust and validation processes.

References