Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2014-2898

Опубликовано: 28 янв. 2020
Источник: debian
EPSS Низкий

Описание

wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verification failure.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
cyasslfixed2.9.4+dfsg-1package

EPSS

Процентиль: 77%
0.01008
Низкий

Связанные уязвимости

CVSS3: 9.8
nvd
около 6 лет назад

wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verification failure.

github
больше 3 лет назад

wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verification failure.

EPSS

Процентиль: 77%
0.01008
Низкий