wolfssl vulnerabilities (Alpine)
95 vulnerabilities.
wolfsslAlpinewolfSSL heap OOB read in PKCS7 SignedData streaming2.3 LowwolfsslAlpineStack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID5.9 MediumwolfsslAlpineout-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName6.9 MediumwolfsslAlpinePKCS7 CBC Padding Oracle — Plaintext Recovery6.3 MediumwolfsslAlpineSession Cache Restore — Arbitrary Free via Deserialized Pointer4.1 MediumwolfsslAlpineInteger underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.2.1 LowwolfsslAlpineDTLS 1.3 ACK heap buffer overflow8.3 HighwolfsslAlpineURI nameConstraints not enforced in ConfirmNameConstraints()7.0 HighwolfsslAlpinewolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse6.0 MediumwolfsslAlpineHeap buffer overflow in CertFromX509() via AuthorityKeyIdentifier6.3 MediumwolfsslAlpineHeap Out-of-Bounds Write in DecodeObjectId() in wolfSSL2.3 LowwolfsslAlpinewolfSSL ECDSA Certificate Verification9.3 CriticalwolfsslAlpinewc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read1.2 LowwolfsslAlpineInteger Overflow in Certificate Chain Allocation1.2 LowwolfsslAlpineImproper key_share validation in TLS 1.3 HelloRetryRequest1.2 LowwolfsslAlpineHeap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path1.3 LowwolfsslAlpineBuffer Overflow in HPKE via Oversized ECH Config6.9 MediumwolfsslAlpinewolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation7.5 HighwolfsslAlpineECH parsing heap buffer overflow8.3 HighwolfsslAlpineCompiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V2.1 LowwolfsslAlpineNon-constant time multiplication subroutine __muldi3 on RISC-V RV32I2.1 LowwolfsslAlpineFault injection attack with ML-DSA and ML-KEM on ARM4.3 MediumwolfsslAlpineBuffer overflow in CRL number parsing in wolfSSL7.2 HighwolfsslAlpineHeap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function5.0 MediumwolfsslAlpineAcceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.25.5 MediumwolfsslAlpineInteger underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path2.1 LowwolfsslAlpineStack buffer overflow in PKCS7 SignedData encoding with custom signed attributes2.2 LowwolfsslAlpineTLS 1.2 Client Can Downgrade Digest Used2.3 LowwolfsslAlpineTiming Side-Channel in PSK Binder Verification2.3 LowwolfsslAlpineInteger Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt2.1 LowwolfsslAlpineConstant Time Issue with Xtensa-based ESP32 and X225191.0 LowwolfsslAlpinePotential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello6.3 MediumwolfsslAlpineDoS Vulnerability in wolfSSL TLS 1.3 CKS Extension2.3 LowwolfsslAlpineImproper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify2.1 LowwolfsslAlpineForward Secrecy Violation in WolfSSL TLS 1.36.3 MediumwolfsslAlpineBuffer overread in domain name matching10.0 CriticalwolfsslAlpineFault Injection of RSA encryption in WolfCrypt5.9 MediumwolfsslAlpineSEGV and out of bounds memory read from malicious packet7.5 HighwolfsslAlpineImproper (D)TLS key boundary enforcement5.3 MediumwolfsslAlpineMarvin Attack vulnerability in SP Math All RSA5.9 MediumwolfsslAlpineTLS 1.3 client issue handling malicious server when not including a KSE and PSK extension9.1 CriticalwolfsslAlpineIn wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then...9.1 CriticalwolfsslAlpineIn wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake...7.5 HighwolfsslAlpineAn issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL...7.5 HighwolfsslAlpinewolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a...7.5 High