CVE-2022-48437

An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate.

• CWE-295
• CWE-295

• https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.1-relnotes.txtPatch
• https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/001_x509.patch.sigPatch
• https://github.com/openbsd/src/commit/4f94258c65a918ee3d8670e93916d15bf879e6ecPatch
• https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.1-relnotes.txtPatch
• https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/001_x509.patch.sigPatch
• https://github.com/openbsd/src/commit/4f94258c65a918ee3d8670e93916d15bf879e6ecPatch

Published

Apr 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-48430In JetBrains IntelliJ IDEA before 2023.1 file content could …7.5
• CVE-2022-48431In JetBrains IntelliJ IDEA before 2023.1 in some cases, Grad…7.8
• CVE-2022-48432In JetBrains IntelliJ IDEA before 2023.1 the bundled version…8.8
• CVE-2022-48433In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could…7.5
• CVE-2022-48434libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used i…8.1
• CVE-2022-48435In JetBrains PhpStorm before 2023.1 source code could be log…3.3
• CVE-2022-48438In cp_dump driver, there is a possible out of bounds write d…4.4
• CVE-2022-48439In cp_dump driver, there is a possible out of bounds write d…4.4
• CVE-2022-4844Cross-Site Request Forgery (CSRF) in GitHub repository useme…8.8
• CVE-2022-48440In dialer service, there is a possible missing permission ch…5.5
• CVE-2022-48441In dialer service, there is a possible missing permission ch…5.5
• CVE-2022-48442In dialer service, there is a possible missing permission ch…5.5