Описание
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wolfssl | fixed | 5.0.0-1 | package | |
| wolfssl | fixed | 4.6.0+p1-0+deb11u1 | bullseye | package |
Примечания
https://github.com/wolfSSL/wolfssl/commit/f93083be72a3b3d956b52a7ec13f307a27b6e093
EPSS
Процентиль: 36%
0.00152
Низкий
Связанные уязвимости
CVSS3: 5.9
ubuntu
больше 4 лет назад
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.
CVSS3: 5.9
nvd
больше 4 лет назад
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.
github
больше 3 лет назад
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.
EPSS
Процентиль: 36%
0.00152
Низкий