CVE-2015-6925

Опубликовано: 22 янв. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*

Версия до 3.6.6 (включая)

EPSS

Процентиль: 75%

0.00895

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2015-6925

CVSS3: 7.5

ubuntu

около 10 лет назад

wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.

CVE-2015-6925

CVSS3: 7.5

debian

около 10 лет назад

wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to caus ...

GHSA-m9j2-cgfg-36p9

CVSS3: 7.5

github

больше 3 лет назад

wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.

EPSS

Процентиль: 75%

0.00895

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-399