On November 1, 2022, the OpenSSL Project announced the following vulnerabilities:
CVE-2022-3602 – X.509 Email Address 4-byte Buffer Overflow
CVE-2022-3786 – X.509 Email Address Variable Length Buffer Overflow
For a description of these vulnerabilities, see OpenSSL Security Advisory [Nov 1 2022].
This advisory will be updated as additional information becomes available.
This advisory is available at the following link:
Security Impact Rating: High
Source:: Cisco Security Advisories