Filters
Software
WolfSSL wolfsslBuffer overread in domain name matching
10
First published (updated )
WolfSSL wolfsslTLS 1.3 client issue handling malicious server when not including a KSE and PSK extension
9.1
First published (updated )
WolfSSL wolfsslIn wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a …
9.1
First published (updated )
WolfSSL wolfsslwolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (…
9.1
First published (updated )
WolfSSL wolfsslwolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number i…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslRsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain rel…
10
First published (updated )
WolfSSL wolfsslwolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to…
9.8
First published (updated )
WolfSSL wolfsslThe SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length …
9.8
First published (updated )
WolfSSL wolfsslThe DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allo…
9.8
First published (updated )
WolfSSL wolfsslIn wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certif…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslwolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/as…
9.8
First published (updated )
WolfSSL wolfsslA specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL thro…
9.8
First published (updated )