Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cwpg-8775-j56v

Опубликовано: 21 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

EPSS

Процентиль: 46%
0.006
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-125
CWE-126

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 2 лет назад

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

CVSS3: 5.3
nvd
больше 2 лет назад

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

CVSS3: 5.3
msrc
больше 1 года назад

Heap-buffer over-read with WOLFSSL_CALLBACKS

CVSS3: 5.3
debian
больше 2 лет назад

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the ...

EPSS

Процентиль: 46%
0.006
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-125
CWE-126