Jonasbn vulnerabilities
We track 6 vulnerabilities in Jonasbn products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on August 9, 2026.
Latest Jonasbn vulnerabilities
- 7.5 High severity
Crypt::OpenSSL::PKCS12: NULL Pointer Dereference
Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute. print_attribute() sizes the destination buffer for a BMPSTRING attribute from its declared byte length with `Renew(*
- 9.1 Critical severity
Crypt::OpenSSL::X509: Out-of-bounds Read
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), th
- 7.5 High severity
Crypt::OpenSSL::X509: NULL Pointer Dereference
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check
- 9.1 Critical severity
Crypt::OpenSSL::PKCS12: Out-of-bounds Read
Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path. print_attribute() copies a UTF8STRING ASN.1 attribute value into a heap buffer sized exactly to its declared length via strncpy, leaving no NUL ter
- 9.8 Critical severity
Crypt::OpenSSL::PKCS12: Improper Null Termination
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to SvPV_nolen. The Perl length is discarded. The C code (or OpenSSL
- 9.8 Critical severity
Crypt::OpenSSL::PKCS12: Out-of-bounds Write
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute on a SAFEBAG, via info() or info_as_hash(), a heap out-of-bounds write would be trigg