Filter
WolfSSL wolfsslBuffer overread in domain name matching
10
First published (updated )
WolfSSL wolfsslRsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain rel…
10
First published (updated )
WolfSSL wolfsslwolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/as…
9.8
First published (updated )
WolfSSL wolfsslA specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL thro…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslwolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number i…
9.8
First published (updated )
WolfSSL wolfsslIn wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certif…
9.8
First published (updated )
WolfSSL wolfsslThe SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length …
9.8
First published (updated )
WolfSSL wolfsslThe DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allo…
9.8
First published (updated )
WolfSSL wolfsslwolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslwolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (…
9.1
First published (updated )
WolfSSL wolfsslTLS 1.3 client issue handling malicious server when not including a KSE and PSK extension
9.1
First published (updated )
WolfSSL wolfsslIn wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a …
9.1
First published (updated )
WolfSSL wolfsslFault Injection of RSA encryption in WolfCrypt
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslFault Injection of EdDSA signature in WolfCrypt
8.8
First published (updated )
WolfSSL wolfsslDoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain an…
8.1
First published (updated )
WolfSSL wolfsslwolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resourc…
7.5
First published (updated )
WolfSSL wolfsslwolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
debian/wolfsslwolfssl before 3.2.0 has a server certificate that is not properly authorized for server authenticat…
7.5
First published (updated )
debian/wolfsslwolfssl before 3.2.0 does not properly issue certificates for a server's hostname.
7.5
First published (updated )
debian/wolfsslwolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates.
7.5
First published (updated )
WolfSSL wolfsslwolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WolfSSL wolfsslAn issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message …
7.5
First published (updated )
WolfSSL wolfsslwolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side…
7.5
First published (updated )
WolfSSL wolfsslwolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check f…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.