Поиск уязвимостей
Количество 5
Количество 5
CVE-2022-23408
wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.
CVE-2022-23408
wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.
CVE-2022-23408
wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situatio ...
GHSA-xx9h-ppjx-3rjx
wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.
ALT-PU-2022-1006
ALT-PU-2022-1006: package `wolfssl` update to version 5.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-23408 wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c. | CVSS3: 9.1 | 1% Низкий | почти 5 лет назад |
 | CVE-2022-23408 wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c. | CVSS3: 9.1 | 1% Низкий | почти 5 лет назад |
| CVE-2022-23408 wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situatio ... | CVSS3: 9.1 | 1% Низкий | почти 5 лет назад |
| GHSA-xx9h-ppjx-3rjx wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c. | 1% Низкий | почти 5 лет назад | |
| ALT-PU-2022-1006 ALT-PU-2022-1006: package `wolfssl` update to version 5.1.1-alt1 | CVSS3: 9.1 | 1% Низкий | почти 5 лет назад |
Уязвимостей на страницу