Openssl · Openssl · CVE-2022-3996
**Name of the Vulnerable Software and Affected Versions**
OpenSSL (affected versions not specified)
**Description**
The issue arises when an X.509 certificate contains a malformed policy constraint and policy processing is enabled. This results in a write lock being taken twice recursively, leading to a denial of service when the affected process hangs on some operating systems, most notably Windows. Policy processing is enabled by passing the `-policy` argument to the command line utilities or by calling the `X509 VERIFY PARAM set1 policies()` function. It is worth noting that policy processing being enabled on a publicly facing server is not considered a common setup.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.