Heap-based Buffer Overflow in ssldump Affects TLS X.509 Certificate Fingerprinting
CVE-2026-111458

6.8MEDIUM

Key Information:

Vendor

Adulau

Status
Ssldump
Vendor
CVE Published:
16 October 2026

What is CVE-2026-111458?

The fanx_fingerprint function in ssldump is vulnerable due to improper heap buffer allocation for X.509 certificate fingerprinting. This oversight leads to a buffer overflow, triggered by input from crafted pcap files. Attackers can exploit this flaw to potentially cause denial of service or execute arbitrary code in the context of the user running ssldump, especially when FAN/1 fingerprinting is enabled.

Affected Version(s)

ssldump 0 <= 1.9.0

References

https://github.com/adulau/ssldump/commit/8ad55683cc018660...
patch

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alexandre Dulaunoy
https://github.com/TristanInSec
.