CVE-2022-42905: Critical severity wolfSSL wolfssl vulnerability
In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSLCALLBACKS flag), then a malicious TLS 1.3 client or network attacker can trigger a buffer over-read on the heap of 5 bytes. (WOLFSSLCALLBACKS is only intended for debugging.)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wolfSSLto a version that resolves this vulnerability.Fixed in 5.5.2 - Configuration
Do not enable WOLFSSL_CALLBACKS except for debugging; disable it to prevent the buffer over-read issue in versions before 5.5.2.
wolfSSL WOLFSSL_CALLBACKS flag = disabled
Event History
Frequently Asked Questions
What is the vulnerability ID of this wolfSSL vulnerability?
The vulnerability ID of this wolfSSL vulnerability is CVE-2022-42905.
What is the severity rating of CVE-2022-42905?
The severity rating of CVE-2022-42905 is critical with a score of 9.1.
How does the vulnerability in wolfSSL before 5.5.2 occur?
The vulnerability in wolfSSL before 5.5.2 occurs when callback functions are enabled (via the WOLFSSL_CALLBACKS flag), allowing a malicious TLS 1.3 client or network attacker to trigger a 5-byte buffer over-read on the heap.
Which version of wolfSSL is affected by this vulnerability?
This vulnerability affects wolfSSL versions up to (but not including) 5.5.2.
Are there any references available for this vulnerability?
Yes, the following references are available for this vulnerability: [1] http://packetstormsecurity.com/files/170610/wolfSSL-WOLFSSL_CALLBACKS-Heap-Buffer-Over-Read.html, [2] http://seclists.org/fulldisclosure/2023/Jan/11, [3] https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/