Filters
WolfSSL wolfsslFault Injection of EdDSA signature in WolfCrypt
8.8
First published (updated )
WolfSSL wolfsslFault Injection of RSA encryption in WolfCrypt
8.8
First published (updated )
WolfSSL wolfsslBuffer overread in domain name matching
10
First published (updated )
WolfSSL wolfsslTLS 1.3 client issue handling malicious server when not including a KSE and PSK extension
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslIn wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a …
9.1
First published (updated )
WolfSSL wolfsslAn issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads…
5.3
First published (updated )
WolfSSL wolfsslwolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the clien…
5.9
First published (updated )
WolfSSL wolfsslAn issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, onl…
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslAn issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server …
7.5
First published (updated )
WolfSSL wolfsslwolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check f…
7.5
First published (updated )
WolfSSL wolfsslIn wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentic…
7.5
First published (updated )
WolfSSL wolfsslIn wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a…
6.5
First published (updated )
WolfSSL wolfsslwolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (…
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslwolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant respons…
5.9
First published (updated )
WolfSSL wolfsslwolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number i…
9.8
First published (updated )
WolfSSL wolfsslIn wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-lev…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslDoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain an…
8.1
First published (updated )
WolfSSL wolfsslRsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain rel…
10
First published (updated )
WolfSSL wolfsslwolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within SanityCheckTls…
6.8
First published (updated )
WolfSSL wolfsslAn issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslAn issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS app…
5.3
First published (updated )
WolfSSL wolfsslThe private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inver…
5.3
First published (updated )
WolfSSL wolfsslwolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side…
7.5
First published (updated )
WolfSSL wolfsslwolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to…
9.8
First published (updated )
WolfSSL wolfsslThe SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length …
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslThe DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allo…
9.8
First published (updated )
WolfSSL wolfsslIn wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks.
5.3
First published (updated )
WolfSSL wolfsslwolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA…
7.5
First published (updated )
WolfSSL wolfsslAn issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled.…
5.3
First published (updated )
WolfSSL wolfsslwolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces. This …
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
debian/wolfsslwolfssl before 3.2.0 has a server certificate that is not properly authorized for server authenticat…
7.5
First published (updated )
debian/wolfsslwolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates.
7.5
First published (updated )
pip/wolfcryptwolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --e…
4.7
First published (updated )
WolfSSL wolfsslIn wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certif…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslwolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/as…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.