CVE-2014-2900: Medium severity yaSSL CyaSSL vulnerability
wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X.509 certificate.
Affected Software
Event History
Frequently Asked Questions
What vulnerabilities are associated with CVE-2014-2900?
CVE-2014-2900 allows man-in-the-middle attackers to spoof servers via crafted X.509 certificates due to improper validation of unknown critical extensions.
Which versions of CyaSSL are affected by CVE-2014-2900?
CVE-2014-2900 affects all versions of CyaSSL before 2.9.4.
How can I mitigate the issues related to CVE-2014-2900?
To mitigate CVE-2014-2900, upgrade CyaSSL to version 2.9.4 or later, which fixes the improper certificate validation issue.
Is CVE-2014-2900 a high severity vulnerability?
Yes, CVE-2014-2900 is considered to have a high severity due to its potential for exploitation in man-in-the-middle attacks.
What should I do if I cannot upgrade to fix CVE-2014-2900?
If you are unable to upgrade, consider implementing additional network security measures such as using VPNs or other protocols to protect against man-in-the-middle attacks.