wolfssl vulnerabilities (Debian)
151 vulnerabilities.
wolfsslDebianHeap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.36.3 MediumwolfsslDebian1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore2.3 LowwolfsslDebianwolfSSL heap OOB read in PKCS7 SignedData streaming2.3 LowwolfsslDebianOOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS6.3 MediumwolfsslDebianStack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID5.9 MediumwolfsslDebianout-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName6.9 MediumwolfsslDebianPKCS7 CBC Padding Oracle — Plaintext Recovery6.3 MediumwolfsslDebianSession Cache Restore — Arbitrary Free via Deserialized Pointer4.1 MediumwolfsslDebianMatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation2.1 LowwolfsslDebianInteger underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.2.1 LowwolfsslDebianDTLS 1.3 ACK heap buffer overflow8.3 HighwolfsslDebianURI nameConstraints not enforced in ConfirmNameConstraints()7.0 HighwolfsslDebianwolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse6.0 MediumwolfsslDebianHeap buffer overflow in CertFromX509() via AuthorityKeyIdentifier6.3 MediumwolfsslDebianHeap Out-of-Bounds Write in DecodeObjectId() in wolfSSL2.3 LowwolfsslDebianwolfSSL ECDSA Certificate Verification9.3 CriticalwolfsslDebianwc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read1.2 LowwolfsslDebianInteger Overflow in Certificate Chain Allocation1.2 LowwolfsslDebianImproper key_share validation in TLS 1.3 HelloRetryRequest1.2 LowwolfsslDebianHeap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path1.3 LowwolfsslDebianBuffer Overflow in HPKE via Oversized ECH Config6.9 MediumwolfsslDebianwolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation7.5 HighwolfsslDebianECH parsing heap buffer overflow8.3 HighwolfsslDebianCompiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V2.1 LowwolfsslDebianNon-constant time multiplication subroutine __muldi3 on RISC-V RV32I2.1 LowwolfsslDebianFault injection attack with ML-DSA and ML-KEM on ARM4.3 MediumwolfsslDebianBuffer overflow in CRL number parsing in wolfSSL7.2 HighwolfsslDebianHeap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function5.0 MediumwolfsslDebianAcceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.25.5 MediumwolfsslDebianInteger underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path2.1 LowwolfsslDebianStack buffer overflow in PKCS7 SignedData encoding with custom signed attributes2.2 LowwolfsslDebianPotential non-constant time compiled code with Clang LLVM1.0 LowwolfsslDebianTLS 1.2 Client Can Downgrade Digest Used2.3 LowwolfsslDebianTiming Side-Channel in PSK Binder Verification2.3 LowwolfsslDebianInteger Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt2.1 LowwolfsslDebianConstant Time Issue with Xtensa-based ESP32 and X225191.0 LowwolfsslDebianPotential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello6.3 MediumwolfsslDebianDoS Vulnerability in wolfSSL TLS 1.3 CKS Extension2.3 LowwolfsslDebianImproper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify2.1 LowwolfsslDebianForward Secrecy Violation in WolfSSL TLS 1.36.3 MediumwolfsslDebianIn the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as...7.0 HighwolfsslDebianFault Injection of EdDSA signature in WolfCrypt6.7 MediumwolfsslDebianAES T-Table sub-cache-line leakage4.1 MediumwolfsslDebianECDSA nonce bias caused by truncation4.1 MediumwolfsslDebianUnverifed Ciphersuite used on a client-side TLS1.3 Downgrade5.1 MediumwolfsslDebianSafe-error attack on TLS 1.3 Protocol5.1 MediumwolfsslDebianBuffer overread in domain name matching10.0 CriticalwolfsslDebianFault Injection of RSA encryption in WolfCrypt5.9 MediumwolfsslDebianSEGV and out of bounds memory read from malicious packet7.5 HighwolfsslDebianHeap-buffer over-read with WOLFSSL_CALLBACKS5.3 Medium- Show moreLoading…