CVE-2024-0901

Опубликовано: 25 мар. 2024

Источник: nvd

CVSS3: 7.5

CVSS3: 9.1

EPSS Низкий

Описание

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.

Ссылки

https://github.com/wolfSSL/wolfssl/issues/7089
Exploit
Issue Tracking
https://github.com/wolfSSL/wolfssl/pull/7099
Issue Tracking
Patch
https://github.com/wolfSSL/wolfssl/issues/7089
Exploit
Issue Tracking
https://github.com/wolfSSL/wolfssl/pull/7099
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*

Версия от 3.12.2 (включая) до 5.6.6 (включая)

EPSS

Процентиль: 53%

0.00694

Низкий

7.5 High

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-129

Связанные уязвимости

CVE-2024-0901

CVSS3: 9.1

ubuntu

больше 2 лет назад

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.

CVE-2024-0901

CVSS3: 7.5

msrc

9 месяцев назад

SEGV and out of bounds memory read from malicious packet

CVE-2024-0901

CVSS3: 9.1

debian

больше 2 лет назад

Remotely executed SEGV and out of bounds read allows malicious packet ...

GHSA-qrv4-68mg-fv43

CVSS3: 7.5

github

больше 2 лет назад

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.

ALT-PU-2024-18314

CVSS3: 9.1

altlinux

больше 2 лет назад

ALT-PU-2024-18314: package `wolfssl` update to version 5.7.0-alt1

EPSS

Процентиль: 53%

0.00694

Низкий

7.5 High

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-129