Wolfssl
Page 2 of 2 — Wolfssl CVEs from a corpus of 156, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39173 | High | 7.5 | 2022-09-29 | In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous T… |
CVE-2021-44718 | Medium | 5.9 | 2022-09-02 | wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-th… |
CVE-2022-38153 | Medium | 5.9 | 2022-08-31 | An issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, only version 5.3.0 is exploitable. Man-in-the-middle attackers… |
CVE-2022-38152 | High | 7.5 | 2022-08-31 | An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes… |
CVE-2022-34293 | High | 7.5 | 2022-08-08 | wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped. |
CVE-2022-25640 | High | 7.5 | 2022-02-24 | In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify mess… |
CVE-2022-25638 | Medium | 6.5 | 2022-02-24 | In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the s… |
CVE-2022-23408 | Critical | 9.1 | 2022-01-18 | wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or… |
CVE-2021-45939 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Subscribe). |
CVE-2021-45938 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Unsubscribe). |
CVE-2021-45937 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Connect). |
CVE-2021-45936 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType). |
CVE-2021-45934 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket and MqttClient_WaitType). |
CVE-2021-45933 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). |
CVE-2021-45932 | Medium | 5.5 | 2022-01-01 | wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). |
CVE-2021-38597 | Medium | 5.9 | 2021-08-12 | wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension. |
CVE-2021-37155 | Critical | 9.8 | 2021-07-21 | wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCS… |
CVE-2021-24116 | Medium | 4.9 | 2021-07-14 | In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about se… |
CVE-2021-3336 | High | 8.1 | 2021-01-29 | DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or R… |
CVE-2020-36177 | Critical | 9.8 | 2021-01-06 | RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size. |
CVE-2020-24613 | Medium | 6.8 | 2020-08-24 | wolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within SanityCheckTls13MsgReceived() in tls13.c. This is an incorrect implementa… |
CVE-2020-24585 | Medium | 5.3 | 2020-08-21 | An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do not produce an out-of-… |
CVE-2020-15309 | High | 7.0 | 2020-08-21 | An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local attackers can conduct a cache-timing attack against public key op… |
CVE-2020-12457 | High | 7.5 | 2020-08-21 | An issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message processing logic for TLS 1.3. If an attacker sends ChangeCi… |
CVE-2020-11735 | Medium | 5.3 | 2020-06-25 | The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective co… |
CVE-2020-11713 | High | 7.5 | 2020-04-12 | wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks. |
CVE-2014-2898 | Critical | 9.8 | 2020-01-28 | wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds r… |
CVE-2014-2897 | Critical | 9.8 | 2020-01-28 | The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows remote attackers to h… |
CVE-2014-2896 | Critical | 9.8 | 2020-01-28 | The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors… |
CVE-2019-19963 | Medium | 5.3 | 2019-12-25 | An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled. DSA signing uses the BEEA algorithm during modular inversi… |
CVE-2019-19962 | High | 7.5 | 2019-12-25 | wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography. |
CVE-2019-19960 | Medium | 5.3 | 2019-12-25 | In wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks. |
CVE-2019-14317 | Medium | 5.3 | 2019-12-11 | wolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces. This allows a remote attacker to compute the long term private k… |
CVE-2014-2904 | High | 7.5 | 2019-11-21 | wolfssl before 3.2.0 has a server certificate that is not properly authorized for server authentication. |
CVE-2014-2902 | High | 7.5 | 2019-11-21 | wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates. |
CVE-2014-2901 | High | 7.5 | 2019-11-21 | wolfssl before 3.2.0 does not properly issue certificates for a server's hostname. |
CVE-2019-18840 | High | 7.5 | 2019-11-09 | In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is… |
CVE-2019-13628 | Medium | 4.7 | 2019-10-03 | wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signa… |
CVE-2019-16748 | Critical | 9.8 | 2019-09-24 | In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-… |
CVE-2019-15651 | Critical | 9.8 | 2019-08-26 | wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is mishandled for… |
CVE-2019-11873 | Critical | 9.8 | 2019-05-23 | wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a craf… |
CVE-2019-6439 | Critical | 9.8 | 2019-01-16 | examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow. |
CVE-2018-16870 | Medium | 5.9 | 2019-01-03 | It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to… |
CVE-2018-12436 | Medium | 4.7 | 2018-06-15 | wolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem o… |
CVE-2017-13099 | High | 7.5 | 2017-12-13 | wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover t… |
CVE-2014-2903 | Medium | 5.9 | 2017-10-06 | CyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers to spoof servers via a crafted server certificate not authori… |
CVE-2017-2800 | Critical | 9.8 | 2017-05-24 | A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vu… |
CVE-2017-8855 | High | 7.5 | 2017-05-09 | wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key. |
CVE-2017-8854 | High | 7.8 | 2017-05-09 | wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed temporary DH file. |
CVE-2017-6076 | Medium | 5.5 | 2017-02-24 | In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache… |
CVE-2016-7440 | Medium | 5.5 | 2016-12-13 | The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys… |
CVE-2016-7439 | Medium | 5.5 | 2016-12-13 | The C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank h… |
CVE-2016-7438 | Medium | 5.5 | 2016-12-13 | The C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank h… |
CVE-2015-7744 | Medium | 5.9 | 2016-01-22 | wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key… |
CVE-2015-6925 | High | 7.5 | 2016-01-22 | wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS… |
CVE-2009-4484 | | 2009-12-30 | Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x b… |