1 files changed, 7 insertions, 1 deletions

diff --git a/src/lib/libcrypto/x509/x509_set.c b/src/lib/libcrypto/x509/x509_set.c
index b56d30aec5..684a899781 100644
--- a/src/lib/libcrypto/x509/x509_set.c
+++ b/src/lib/libcrypto/x509/x509_set.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_set.c,v 1.26 2023/06/23 08:00:28 tb Exp $ */
+/* $OpenBSD: x509_set.c,v 1.27 2024/03/26 11:09:37 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -84,6 +84,12 @@ X509_set_version(X509 *x, long version)
 {
         if (x == NULL)
                 return (0);
+        /*
+         * RFC 5280, 4.1: versions 1 - 3 are specified as follows.
+         * Version  ::=  INTEGER  {  v1(0), v2(1), v3(2) }
+         */
+        if (version < 0 || version > 2)
+                return (0);
         if (x->cert_info->version == NULL) {
                 if ((x->cert_info->version = ASN1_INTEGER_new()) == NULL)
                         return (0);