Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xx9h-ppjx-3rjx

Опубликовано: 19 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

EPSS

Процентиль: 72%
0.01379
Низкий

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 9.1
ubuntu
почти 5 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

CVSS3: 9.1
nvd
почти 5 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

CVSS3: 9.1
debian
почти 5 лет назад

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situatio ...

CVSS3: 9.1
altlinux
почти 5 лет назад

ALT-PU-2022-1006: package `wolfssl` update to version 5.1.1-alt1

EPSS

Процентиль: 72%
0.01379
Низкий

Дефекты

CWE-330