Описание
Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verification loop in PKCS7_VerifySignedData().
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| wolfssl | unfixed | package | ||
| wolfssl | no-dsa | trixie | package | |
| wolfssl | no-dsa | bookworm | package |
Примечания
https://github.com/wolfssl/wolfssl/pull/10039
Fixed by (merge): https://github.com/wolfSSL/wolfssl/commit/49cbbab6b0372d78574ca822387898382cb41ed1 (v5.9.1-stable)
EPSS
Процентиль: 2%
0.00014
Низкий
Связанные уязвимости
github
5 дней назад
Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verification loop in PKCS7_VerifySignedData().
EPSS
Процентиль: 2%
0.00014
Низкий