Поиск уязвимостей
Количество 6
Количество 6
CVE-2022-39173
In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message.
CVE-2022-39173
In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message.
CVE-2022-39173
In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow ...
GHSA-ww6v-6x26-hgfc
In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message.
ALT-PU-2022-2688
ALT-PU-2022-2688: package `wolfssl` update to version 5.5.1-alt1
ALT-PU-2023-1034
ALT-PU-2023-1034: package `wolfssl` update to version 5.5.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-39173 In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message. | CVSS3: 7.5 | 6% Низкий | около 4 лет назад |
 | CVE-2022-39173 In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message. | CVSS3: 7.5 | 6% Низкий | около 4 лет назад |
| CVE-2022-39173 In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow ... | CVSS3: 7.5 | 6% Низкий | около 4 лет назад |
| GHSA-ww6v-6x26-hgfc In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message. | CVSS3: 7.5 | 6% Низкий | около 4 лет назад |
| ALT-PU-2022-2688 ALT-PU-2022-2688: package `wolfssl` update to version 5.5.1-alt1 | CVSS3: 7.5 | 6% Низкий | около 4 лет назад |
| ALT-PU-2023-1034 ALT-PU-2023-1034: package `wolfssl` update to version 5.5.4-alt1 | CVSS3: 9.1 | почти 4 года назад |
Уязвимостей на страницу