CVE-2024-45341

Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Medium · published January 28, 2025

CVSS v3.1
6.1
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00525 · 43.7th percentile
Published
2025-01-28T01:03Z
EPSS history
Timeline
  • 28 JAN 01:03Z
    Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509
    cvelistv5