CVE-2025-11936: Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello
Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to excessive CPU and memory consumption during ClientHello processing.
Other sources
Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello
— Microsoft
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11936?
CVE-2025-11936 has been classified as having a high severity due to its potential to cause a denial-of-service attack.
How do I fix CVE-2025-11936?
To mitigate CVE-2025-11936, update wolfSSL to the latest version that addresses this vulnerability.
What platforms are affected by CVE-2025-11936?
CVE-2025-11936 affects multiple platforms running wolfSSL v5.8.2.
What kind of attack does CVE-2025-11936 allow?
CVE-2025-11936 allows a remote unauthenticated attacker to launch a denial-of-service attack by sending a crafted ClientHello message.
What specific vulnerability is present in CVE-2025-11936?
CVE-2025-11936 stems from improper input validation in parsing KeyShareEntry values in the TLS 1.3 protocol.