CVE-2026-58102

{"id": "CVE-2026-58102", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-58102", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-14T13:02:35.283353Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "affectedData": [{"repo": "https://github.com/dsully/perl-crypt-openssl-x509", "vendor": "JONASBN", "product": "Crypt::OpenSSL::X509", "versions": [{"status": "affected", "version": "0", "lessThan": "2.1.3", "versionType": "custom"}], "packageName": "Crypt-OpenSSL-X509", "programFiles": ["X509.xs"], "collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "programRoutines": [{"name": "hv_exts"}, {"name": "Crypt::OpenSSL::X509::extensions"}, {"name": "Crypt::OpenSSL::X509::extensions_by_long_name"}, {"name": "Crypt::OpenSSL::X509::extensions_by_oid"}]}]}], "published": "2026-07-13T23:16:47.127", "references": [{"url": "https://github.com/dsully/perl-crypt-openssl-x509/commit/757289bfce095455c104d4adfe9312e7b339620f.patch", "tags": ["Patch"], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}, {"url": "https://metacpan.org/release/JONASBN/Crypt-OpenSSL-X509-2.1.3/source/Changes.md", "tags": ["Release Notes"], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts.\n\nWhen building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected."}, {"lang": "es", "value": "Las versiones de Crypt::OpenSSL::X509 anteriores a la 2.1.3 para Perl permiten una lectura fuera de l\u00edmites del mont\u00f3n a trav\u00e9s de un OID de extensi\u00f3n de certificado largo en hv_exts.\n\nAl construir el hash de extensi\u00f3n (a trav\u00e9s de extensions(), extensions_by_long_name(), extensions_by_oid(), o has_extension_oid()), el c\u00f3digo pasa el valor de retorno de OBJ_obj2txt() como la longitud de la clave del hash; porque ese valor es la longitud de texto completa del OID en lugar de los bytes escritos en el b\u00fafer de tama\u00f1o fijo (129 bytes), un OID cuyo texto es m\u00e1s largo que el b\u00fafer de 129 bytes provoca una lectura m\u00e1s all\u00e1 de la asignaci\u00f3n, exponiendo memoria adyacente del mont\u00f3n como la clave de hash devuelta. extensions_by_name() utiliza la ruta de nombre corto est\u00e1tica y no se ve afectada."}], "lastModified": "2026-10-24T22:10:00.210", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jonasbn:crypt\\:\\:openssl\\:\\:x509:*:*:*:*:*:perl:*:*", "vulnerable": true, "matchCriteriaId": "D2DF3628-106C-4788-8797-A30E048275AF", "versionEndExcluding": "2.1.3"}], "operator": "OR"}]}], "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}