Описание
wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wolfssl | fixed | 5.5.3-1 | package | |
| wolfssl | no-dsa | bullseye | package |
Примечания
http://www.openwall.com/lists/oss-security/2022/08/08/6
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 4 лет назад
wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped.
CVSS3: 7.5
nvd
больше 4 лет назад
wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped.
CVSS3: 7.5
github
больше 4 лет назад
wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped.
CVSS3: 7.5
altlinux
больше 4 лет назад
ALT-PU-2022-2238: package `wolfssl` update to version 5.4.0-alt1
CVSS3: 9.1
altlinux
почти 4 года назад
ALT-PU-2023-1034: package `wolfssl` update to version 5.5.4-alt1