Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xx9h-ppjx-3rjx

Опубликовано: 19 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

EPSS

Процентиль: 59%
0.0039
Низкий

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 9.1
ubuntu
больше 3 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

CVSS3: 9.1
nvd
больше 3 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

CVSS3: 9.1
debian
больше 3 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situatio ...

EPSS

Процентиль: 59%
0.0039
Низкий

Дефекты

CWE-330