CVE-2021-37155: Critical severity wolfSSL wolfssl vulnerability
Published Jul 21, 2021
·Updated
wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response.
Affected Software
1 affected component
wolfSSL wolfssl>=4.6.0<4.8.0
Remediation
Patch Available
Event History
Jul 21, 2021
CVE Published
via MITRE·01:43 PM
Data Sourced
via MITRE·01:43 PM
Description
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-37155.
2
What is the affected software?
The affected software is wolfSSL version 4.6.x through 4.7.x before 4.8.0.
3
What is the severity of CVE-2021-37155?
The severity of CVE-2021-37155 is critical with a CVSS score of 9.8.
4
How does CVE-2021-37155 impact the system?
CVE-2021-37155 allows an attacker to bypass security measures by not producing a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response.
5
How to fix CVE-2021-37155?
To fix CVE-2021-37155, update to wolfSSL version 4.8.0 or later.