ssldump vulnerabilities

CVEs whose affected-version data names the ssldump package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111458Medium· 6.8

today

ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting

The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string "fan1:x509:…

▾ Sunlitadulau · ssldumpvia CVEORG