Логотип exploitDog
bind:CVE-2023-6936
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-6936

Количество 5

Количество 5

ubuntu логотип

CVE-2023-6936

почти 2 года назад

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2023-6936

почти 2 года назад

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

CVSS3: 5.3
EPSS: Низкий
msrc логотип

CVE-2023-6936

около 1 года назад

CVSS3: 9.1
EPSS: Низкий
debian логотип

CVE-2023-6936

почти 2 года назад

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the ...

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-cwpg-8775-j56v

почти 2 года назад

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-6936

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

CVSS3: 5.3
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2023-6936

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

CVSS3: 5.3
0%
Низкий
почти 2 года назад
msrc логотип
CVSS3: 9.1
0%
Низкий
около 1 года назад
debian логотип
CVE-2023-6936

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the ...

CVSS3: 5.3
0%
Низкий
почти 2 года назад
github логотип
GHSA-cwpg-8775-j56v

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

CVSS3: 5.3
0%
Низкий
почти 2 года назад

Уязвимостей на страницу