Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-1034

Критический

ALT-PU-2023-1034: package wolfssl update to version 5.5.4-alt1

Источник
errata.altlinux.org
Дата публикации
12.01.2023
Дата обновления
12.01.2023
Устраненные уязвимости
9

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades wolfssl to version 5.5.4-alt1.

Устраненные уязвимости9

Связанные уязвимости

CVSS3: 5.9
ubuntu
около 4 лет назад

wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle (MITM) position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers.

CVSS3: 5.9
nvd
около 4 лет назад

wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle (MITM) position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers.

CVSS3: 5.9
debian
около 4 лет назад

wolfSSL through 5.0.0 allows an attacker to cause a denial of service ...

CVSS3: 7.5
altlinux
больше 4 лет назад

ALT-PU-2022-1361: package `wolfssl` update to version 5.2.0-alt1

CVSS3: 5.9
github
около 4 лет назад

wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle (MITM) position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers.