Summary
A failed X509_verify_cert() call could leave an unverified certificate issuer in the shared CertManager, allowing later operations using that manager to trust it. Affects wolfSSL 5.8.4 through 5.9.2 in OpenSSL-compatible builds with OPENSSL_EXTRA enabled, NO_CERTS and WOLFCRYPT_ONLY disabled, and an application that calls X509_verify_cert(). Later checks must reuse the affected certificate manager. Fixed in wolfSSL 5.9.4.
Technical analysis
The accompanying research article explains the finding, reproduction, and remediation status.
Read the technical write-upDisclosure timeline
- Public disclosure
Credits
Reported by Christos Papakonstantinou (Cantina Security), as credited by wolfSSL and the CVE record. Remediation by the wolfSSL team.