CVE-2008-2420

Fixed in a distro release EPSS 1%

The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates.

Published 2008-05-23 · CVE record · OSV

Products: stunnel

Distro releases