wolfssl vulnerabilities (Debian)
151 vulnerabilities.
wolfsslDebianImproper (D)TLS key boundary enforcement5.3 MediumwolfsslDebianMarvin Attack vulnerability in SP Math All RSA5.9 MediumwolfsslDebianTLS 1.3 client issue handling malicious server when not including a KSE and PSK extension9.1 CriticalwolfsslDebianIn wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then...9.1 CriticalwolfsslDebianAn issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer...5.3 MediumwolfsslDebianIn wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake...7.5 HighwolfsslDebianwolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the...5.9 MediumwolfsslDebianAn issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however,...5.9 MediumwolfsslDebianAn issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL...7.5 HighwolfsslDebianwolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a...7.5 HighwolfsslDebianIn wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual...7.5 HighwolfsslDebianIn wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication...6.5 MediumwolfsslDebianwolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects...9.1 CriticalwolfsslDebianwolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant...5.9 MediumwolfsslDebianwolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial...9.8 CriticalwolfsslDebianIn wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system...4.9 MediumwolfsslDebianDoTls13CertificateVerify in tls13.c in wolfSSL through 4.6.0 does not cease processing for...8.1 HighwolfsslDebianRsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain...9.8 CriticalwolfsslDebianwolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within...6.8 MediumwolfsslDebianAn issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local...7.0 HighwolfsslDebianAn issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS)...7.5 HighwolfsslDebianAn issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS...5.3 MediumwolfsslDebianThe private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular...5.3 MediumwolfsslDebianwolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing...7.5 HighwolfsslDebianIn wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks.5.3 MediumwolfsslDebianwolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in...7.5 HighwolfsslDebianAn issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is...5.3 MediumwolfsslDebianwolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces....5.3 MediumwolfsslDebianwolfssl before 3.2.0 has a server certificate that is not properly authorized for server...7.5 HighwolfsslDebianwolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates.7.5 HighwolfsslDebianwolfssl before 3.2.0 does not properly issue certificates for a server's hostname.7.5 HighwolfsslDebianIn wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing...7.5 HighwolfsslDebianwolfCrypt leaks cryptographic information via timing side channel4.7 MediumwolfsslDebianIn wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1...9.8 CriticalwolfsslDebianwolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src...9.8 CriticalwolfsslDebianwolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is...9.8 CriticalwolfsslDebianexamples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based...9.8 CriticalwolfsslDebianIt was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher...5.9 MediumwolfsslDebianwolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on...4.7 MediumwolfsslDebianwolfSSL Bleichenbacher/ROBOT7.5 HighwolfsslDebianCyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers...5.9 MediumwolfsslDebianA specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL...8.1 HighwolfsslDebianwolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.7.5 HighwolfsslDebianwolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka...7.8 HighwolfsslDebianIn versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key...5.5 MediumwolfsslDebianThe C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...5.5 MediumwolfsslDebianThe C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...5.5 MediumwolfsslDebianThe C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL)...5.5 MediumwolfsslDebianwolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the...5.9 MediumwolfsslDebianwolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service ...7.5 High- Show moreLoading…