Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wgff-2g74-38qq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is mishandled for a crafted DER certificate in GetLength_ex.

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is mishandled for a crafted DER certificate in GetLength_ex.

EPSS

Процентиль: 45%
0.00225
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 6 лет назад

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is mishandled for a crafted DER certificate in GetLength_ex.

CVSS3: 9.8
nvd
больше 6 лет назад

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is mishandled for a crafted DER certificate in GetLength_ex.

CVSS3: 9.8
debian
больше 6 лет назад

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCert ...

EPSS

Процентиль: 45%
0.00225
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125