OSV-2023-107
Heap-buffer-overflow in DecodeBasicOcspResponse
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56308
Crash type: Heap-buffer-overflow READ {*}
Crash state:
DecodeBasicOcspResponse
OcspResponseDecode
ocsp.c
What each source reports
OSV No score
Heap-buffer-overflow in DecodeBasicOcspResponse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56308
Crash type: Heap-buffer-overflow READ {*}
Crash state:
DecodeBasicOcspResponse
OcspResponseDecode
ocsp.c
- Record
OSV-2023-107- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wolfsslOSS-Fuzz |
Listed versions, plus commit ranges v5.6.0-stablev5.6.2-stablev5.6.3-stableWCv5.2.1-PILOTv5.6.4-stable Show 17 moreShow lessv5.6.6-stablev5.7.0-stablewolfEntropy1v5.7.2-stablev5.7.4-stablev5.7.6-stablev5.2.1v5.8.0-stablev5.8.2-stablev5.8.4-stablewolfEntropy2dv5.9.0-stablev5.9.1-stablewolfEntropyv5.2.4-CHKINv5.9.2-stablev5.9.4-stablewolfEntropyv7.0.0-CHKIN |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-107 is a vulnerability with no CVSS score yet in wolfssl, published February 25, 2023. No source lists public exploit code. No source names a fixed version.