{"metadata": {"vulnerability": "CVE-2026-111458", "count": 21, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 14}}, "data": [{"timestamp": "2026-10-16T04:32:38Z", "date_only": false, "value": "2026-10-16T04:32:38Z", "kind": "other", "label": "Fix developed", "source": "cvelistv5 / CIRCL", "record": "CVE-2026-111458", "field": "containers.cna.x_gcve.0.extensions.bcp-05-x-03.x_timeline.events.0.timestamp"}, {"timestamp": "2026-10-16T04:32:38Z", "date_only": false, "value": "2026-10-16T04:32:38Z", "kind": "other", "label": "Fix developed", "source": "gna-1 \u00b7 GCVE-1-2026-20308", "record": "GCVE-1-2026-20308", "field": "containers.cna.x_gcve.0.extensions.bcp-05-x-03.x_timeline.events.0.timestamp"}, {"timestamp": "2026-10-16T05:20:29Z", "date_only": false, "value": "2026-10-16T05:20:29Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CIRCL", "record": "CVE-2026-111458", "field": "containers.cna.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-16T05:20:29Z", "date_only": false, "value": "2026-10-16T05:20:29Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111458", "record": "FKIE_CVE-2026-111458", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T05:20:29Z", "date_only": false, "value": "2026-10-16T05:20:29Z", "kind": "other", "label": "Recorded", "source": "gna-1 \u00b7 GCVE-1-2026-20308", "record": "GCVE-1-2026-20308", "field": "containers.cna.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-16T05:24:00Z", "date_only": false, "value": "2026-10-16T05:24:00.000Z", "kind": "milestone", "label": "Published", "source": "gna-1 \u00b7 GCVE-1-2026-20308", "record": "GCVE-1-2026-20308", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T05:24:00Z", "date_only": false, "value": "2026-10-16T05:24:00.000Z", "kind": "milestone", "label": "Reserved", "source": "gna-1 \u00b7 GCVE-1-2026-20308", "record": "GCVE-1-2026-20308", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T05:24:32.520Z", "date_only": false, "value": "2026-10-16T05:24:32.520Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111458", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T05:24:43.178Z", "date_only": false, "value": "2026-10-16T05:24:43.178Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111458", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T05:26:35.160Z", "date_only": false, "value": "2026-10-16T05:26:35.160027Z", "kind": "other", "label": "Updated", "source": "gna-1 \u00b7 GCVE-1-2026-20308", "record": "GCVE-1-2026-20308", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T05:26:55.129Z", "date_only": false, "value": "2026-10-16T05:26:55.129Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CIRCL", "record": "CVE-2026-111458", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T05:48:53.295Z", "date_only": false, "value": "2026-10-16T05:48:53.295090Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117449014163850337", "record": "CVE-2026-111458", "field": "creation_timestamp", "uuid": "02aa4898-6650-4792-b1ad-aed206ee473b", "content": "CVE-2026-111458 ssldump Heap Buffer Overflow in FAN/1 X.509 Fingerprint Formatting The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1:x509:server:passive:%s:sha256:%s\" contains 33 fixed characters in addition to the two variable-length fields and a null terminator, requiring strlen(b64) + strlen(hex) + 34 bytes. This miscalculation results in a 3-byte heap-based buffer overflow on every invocation of the function with valid inputs. The overflow occurs because sprintf writes the full formatted string into the undersized heap buffer without bounds checking. An attacker who can supply a crafted pcap file containing a TLS X.509 certificate to a user running ssldump with FAN/1 fingerprinting enabled (for example with the -j -N options) can trigger the overflow. The resulting heap corruption may lead to denial of service through a crash or, in a worst-case scenario, arbitrary code execution in the context of the user running ssldump. The vulnerability is deterministic and requires no special privileges beyond the ability to provide input to the tool.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111458https://github.com/adulau/ssldump/commit/8ad55683cc0186600c085d33be5a5b627db78467#adulau #ssldump#CVE_2026_111458#bot", "url": "https://infosec.exchange/users/cve/statuses/117449014163850337"}, {"timestamp": "2026-10-16T06:17:09Z", "date_only": false, "value": "2026-10-16T06:17:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PX2J-96C7-VXC7", "record": "GHSA-PX2J-96C7-VXC7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T06:17:09.510Z", "date_only": false, "value": "2026-10-16T06:17:09.510", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111458", "record": "FKIE_CVE-2026-111458", "field": "published"}, {"timestamp": "2026-10-16T06:30:28Z", "date_only": false, "value": "2026-10-16T06:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PX2J-96C7-VXC7", "record": "GHSA-PX2J-96C7-VXC7", "field": "published"}, {"timestamp": "2026-10-16T06:30:28Z", "date_only": false, "value": "2026-10-16T06:30:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PX2J-96C7-VXC7", "record": "GHSA-PX2J-96C7-VXC7", "field": "modified"}, {"timestamp": "2026-10-16T12:30:41.664Z", "date_only": false, "value": "2026-10-16T12:30:41.664327Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111458", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T12:30:41.664Z", "date_only": false, "value": "2026-10-16T12:30:41.664327Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111458", "record": "FKIE_CVE-2026-111458", "field": "metrics.ssvcV203.1.ssvcData.timestamp"}, {"timestamp": "2026-10-16T12:30:53.251Z", "date_only": false, "value": "2026-10-16T12:30:53.251Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111458", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T12:30:53.251Z", "date_only": false, "value": "2026-10-16T12:30:53.251Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111458", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:04:29.760Z", "date_only": false, "value": "2026-10-16T20:04:29.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111458", "record": "FKIE_CVE-2026-111458", "field": "lastModified"}]}