wolfssh vulnerabilities (Alpine)
5 vulnerabilities.
-
wolfsshAlpine wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion 6.9 Medium -
wolfsshAlpine wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms 5.3 Medium -
wolfsshAlpine wolfSSHd on Windows race condition leading to logon token reused across connections 7.7 High -
wolfsshAlpine wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check 6.3 Medium -
wolfsshAlpine wolfSSH ECDSA host key curve not validated against negotiated algorithm 9.0 Critical