CVE-2026-111458
Description
A flaw was found in ssldump. A heap-based buffer overflow allows an attacker to achieve arbitrary code execution or cause a Denial of Service (DoS) through an application crash. The issue occurs because memory is miscalculated and undersized when formatting certificate fingerprints. An attacker can exploit this vulnerability by convincing a user to inspect a maliciously crafted network packet capture file.
Statement
Red Hat rates this vulnerability as Important because, although exploitation requires a user to inspect a maliciously crafted capture file, successful execution can lead to arbitrary code execution or application termination in the context of the running user. ssldump is a command-line network diagnostic utility provided through EPEL rather than core Red Hat Enterprise Linux releases. The tool is not exposed as a continuously listening network daemon and requires explicitly enabling non-default fingerprinting options during packet inspection.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
