Buffer Overflow

openssl is vulnerable to buffer overflow. The vulnerability exists because a buffer overrun can be be triggered in X.509 certificate verification, specifically in name constraint checking where this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer.