CVE-2022-48437

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
Apr 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-484384.4In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SyCVE-2022-484394.4In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SyCVE-2022-48448.8Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-484405.5In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution priCVE-2022-484415.5In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution priCVE-2022-484425.5In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution priCVE-2022-484435.5In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution CVE-2022-484445.5In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution CVE-2022-484455.5In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution CVE-2022-484465.5In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution CVE-2022-484475.5In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution CVE-2022-484485.5In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution
CVE-2022-48437: Medium severity, CVSS 5.3 | Vulnix