CVE-2022-3786

CVE-2022-3786 is a buffer overrun vulnerability in OpenSSL versions 3.0 and later, affecting products like Fedora and Node.js that utilize these OpenSSL versions. This flaw occurs during X.509 certificate verification, specifically in name constraint checking, where a malicious email address in a certificate can cause a denial of service by overflowing the stack with '.' characters. The vulnerability has a CVSS score of 7.5 (High) due to its network-based attack vector and low complexity, potentially impacting both TLS clients and servers. While not currently listed in CISA's KEV catalog or having public exploit code, its high EPSS score and significant community discussion (11 mentions) indicate a notable level of concern and potential for future exploitation.