CVE-2024-45341: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45341?
CVE-2024-45341 is classified as a moderate severity vulnerability.
How do I fix CVE-2024-45341?
To fix CVE-2024-45341, ensure that you avoid using certificates containing URIs with IPv6 addresses in private PKIs.
Who is affected by CVE-2024-45341?
CVE-2024-45341 primarily affects users of private PKIs that implement certificates with URIs.
What kind of certificates are impacted by CVE-2024-45341?
CVE-2024-45341 impacts certificates that contain URIs with IPv6 addresses including zone IDs.
Is CVE-2024-45341 a threat to web PKI users?
No, CVE-2024-45341 does not affect web PKI users since certificates with URIs are not permitted in the web PKI.