Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-1006

Критический

ALT-PU-2022-1006: package wolfssl update to version 5.1.1-alt1

Источник
errata.altlinux.org
Дата публикации
04.01.2022
Дата обновления
04.01.2022
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades wolfssl to version 5.1.1-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 9.1
ubuntu
почти 5 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

CVSS3: 9.1
nvd
почти 5 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

CVSS3: 9.1
debian
почти 5 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situatio ...

github
почти 5 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.