CVE-2018-8970

CVE-2018-8970 is a high-severity vulnerability affecting LibreSSL 2.7.0, specifically within the int_x509_param_set_hosts function. This flaw leads to the silent omission of hostname verification, enabling man-in-the-middle attacks to spoof servers and compromise sensitive information through crafted certificates. The vulnerability has a CVSSv3 score of 7.4 (High), indicating a network-based attack with high impact on confidentiality and integrity, but requiring high attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.