Internet Bug Bounty · Report #175766

Remote client memory corruption in ssl_add_clienthello_tlsext()

Validstatus

6upvotes

30 Dec 2016disclosed

How it was found

https://guidovranken.wordpress.com/2016/10/13/openssl-1-1-0-remote-client-memory-corruption-in-ssl_add_clienthello_tlsext/

OpenSSL is not treating this as a security vulnerability because 1) session tickets need to be enabled 2) request certificate status from server 3) an unrealistically large ALPN list set.

Reporting this for reputation points.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original