CVE Explorer
CVE-2026-58101
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference.
X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds.
A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crash
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","packageName":"Crypt-OpenSSL-X509","product":"Crypt::OpenSSL::X509","programFiles":["X509.xs"],"programRoutines":[{"name":"Crypt::OpenSSL::X509::Extension::basicC"},{"name":"Crypt::OpenSSL::X509::Extension::ia5string"},{"name":"Crypt::OpenSSL::X509::Extension::auth_att"},{"name":"Crypt::OpenSSL::X509::Extension::keyid_data"}],"repo":"https://github.com/dsully/perl-crypt-openssl-x509","vendor":"JONASBN","versions":[{"lessThan":"2.1.3","status":"affected","version":"0","versionType":"custom"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:be2529e5d3b34d3f3ee29b4b42fa57f052b9a7fc8f4f585e4ae83743b9e24345 · sha256:ea428926b65532c8… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:be2529e5d3b34d3f3ee29b4b42fa57f052b9a7fc8f4f585e4ae83743b9e24345 · sha256:ea428926b65532c8… · /containers/adp/0/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-476","description":"CWE-476 NULL Pointer Dereference","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:be2529e5d3b34d3f3ee29b4b42fa57f052b9a7fc8f4f585e4ae83743b9e24345 · sha256:ea428926b65532c8… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"tags":["patch"],"url":"https://github.com/dsully/perl-crypt-openssl-x509/commit/4c1e2370556097c253ae27abe9e1097ea377fbd2.patch"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:be2529e5d3b34d3f3ee29b4b42fa57f052b9a7fc8f4f585e4ae83743b9e24345 · sha256:ea428926b65532c8… · /containers/cna/references/0
{"tags":["release-notes"],"url":"https://metacpan.org/release/JONASBN/Crypt-OpenSSL-X509-2.1.3/source/Changes.md"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:be2529e5d3b34d3f3ee29b4b42fa57f052b9a7fc8f4f585e4ae83743b9e24345 · sha256:ea428926b65532c8… · /containers/cna/references/1
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.