drago-96/CVE-2022-0778

Proof of concept for CVE-2022-0778, which triggers an infinite loop in parsing X.509 certificates due to a bug in BN_mod_sqrt

Smarty

Issues

cannot reproduce with bad certificate
#11 opened 3 years ago by j75
1
Unable to send crafted dangerous certificate in a request
#7 opened 3 years ago by hsvhora
3
ec.key doesn't correspond to cert.der{,.old}
#8 opened 3 years ago by martindorey
1
How to reproduce this problem programmatically
#6 opened 3 years ago by jw-star
0
Cannot Reproduce Certificate Trigger
#5 opened 3 years ago by JasonBurnsInfosec
2
cannot repro
#2 opened 3 years ago by bwolmarans
3
How long should "my_bad_sqrt" take to complete?
#1 opened 3 years ago by doug-rosser
3