CVE-2022-48437

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-48437
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48437.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-48437
Published
2023-04-12T00:00:00Z
Modified
2026-07-22T02:08:57.251588Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in x509/x509verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509verifyctxadd_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48437.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "3.6.1"
                },
                {
                    "fixed": "7.2"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}
References

Affected packages

Git / github.com/libressl/portable

Affected ranges

Type
GIT
Repo
https://github.com/libressl/portable
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
aa1f9b11664ac41f304b638ec259d937fee6281e
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.6.1"
        }
    ],
    "source": "DESCRIPTION"
}

Affected versions

v2.*
v2.1.2
v2.1.3
v2.1.4
v2.2.0
v2.2.1
v2.2.2
v2.3.0
v2.3.1
v2.3.2
v2.4.0
v2.4.1
v2.5.0
v2.5.1
v2.5.2
v2.6.0
v2.6.1
v2.6.2
v2.7.0
v2.7.1
v2.8.0
v2.8.1
v2.9.0
v3.*
v3.0.0
v3.0.1
v3.1.0
v3.2.0
v3.2.1
v3.3.0
v3.3.1
v3.3.2
v3.4.0
v3.5.0
v3.5.1
v3.6.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48437.json"

Git / github.com/openbsd/src

Affected ranges

Type
GIT
Repo
https://github.com/openbsd/src
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4f94258c65a918ee3d8670e93916d15bf879e6ec
Database specific 
{
    "source": "REFERENCES"
}

Database specific

vanir_signatures_modified 
"2026-07-22T02:08:57Z"
vanir_signatures 
[
    {
        "target": {
            "file": "lib/libcrypto/x509/x509_verify.c"
        },
        "id": "CVE-2022-48437-23ff3b02",
        "digest": {
            "line_hashes": [
                "81719393747868085048422088394428365045",
                "299459420622645230707451842010917572902",
                "85799397585808107703557449779900920705",
                "247294790526753992351928178221485709230",
                "234504098091462367986816544589286488793",
                "150242622989381968931317115240370013598",
                "337902517269935143438647334868026160433",
                "273293703492565897298378858890108262716",
                "267881243648794546275961912710928915656",
                "9904423386351368814165591720792026490",
                "315556154492084895725381442474426831272",
                "118772061436964868308665180013205082866",
                "147866471546058165665915264692044477993",
                "168292816833079554680712598173915841368"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/openbsd/src/commit/4f94258c65a918ee3d8670e93916d15bf879e6ec"
    },
    {
        "target": {
            "function": "x509_verify_ctx_add_chain",
            "file": "lib/libcrypto/x509/x509_verify.c"
        },
        "id": "CVE-2022-48437-3b4ec1cd",
        "digest": {
            "function_hash": "86510228362593344781340589714722190578",
            "length": 881.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/openbsd/src/commit/4f94258c65a918ee3d8670e93916d15bf879e6ec"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48437.json"