What’s Vulnerable › Vulnerabilities

CVE-2020-9434

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-27 · updated 2026-06-17
• Weakness: CWE-295

Description

openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values.

Affected products

• Lua-Openssl Project Lua-Openssl: 0.7.7-1

References

• https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca
• https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca

Get alerted when CVE-2020-9434 or the next vulnerability affects your stack