wolfssl vulnerabilities (Ubuntu)
146 vulnerabilities.
wolfsslUbuntuSEGV and out of bounds memory read from malicious packet7.5 HighwolfsslUbuntuHeap-buffer over-read with WOLFSSL_CALLBACKS5.3 MediumwolfsslUbuntuImproper (D)TLS key boundary enforcement5.3 MediumwolfsslUbuntuMarvin Attack vulnerability in SP Math All RSA5.9 MediumwolfsslUbuntuTLS 1.3 client issue handling malicious server when not including a KSE and PSK extension9.1 CriticalwolfsslUbuntuIn wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then...9.1 CriticalwolfsslUbuntuAn issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer...5.3 MediumwolfsslUbuntuIn wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake...7.5 HighwolfsslUbuntuwolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the...5.9 MediumwolfsslUbuntuAn issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however,...5.9 MediumwolfsslUbuntuAn issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL...7.5 HighwolfsslUbuntuwolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a...7.5 HighwolfsslUbuntuIn wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual...7.5 HighwolfsslUbuntuIn wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication...6.5 MediumwolfsslUbuntuwolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects...9.1 CriticalwolfsslUbuntuwolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant...5.9 MediumwolfsslUbuntuwolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial...9.8 CriticalwolfsslUbuntuIn wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system...4.9 MediumwolfsslUbuntuDoTls13CertificateVerify in tls13.c in wolfSSL through 4.6.0 does not cease processing for...8.1 HighwolfsslUbuntuRsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain...9.8 CriticalwolfsslUbuntuwolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within...6.8 MediumwolfsslUbuntuAn issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local...7.0 HighwolfsslUbuntuAn issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS)...7.5 HighwolfsslUbuntuAn issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS...5.3 MediumwolfsslUbuntuThe private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular...5.3 MediumwolfsslUbuntuwolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing...7.5 HighwolfsslUbuntuIn wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks.5.3 MediumwolfsslUbuntuwolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in...7.5 HighwolfsslUbuntuAn issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is...5.3 MediumwolfsslUbuntuwolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces....5.3 MediumwolfsslUbuntuIn wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing...7.5 HighwolfsslUbuntuwolfCrypt leaks cryptographic information via timing side channel4.7 MediumwolfsslUbuntuIn wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1...9.8 CriticalwolfsslUbuntuwolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src...9.8 CriticalwolfsslUbuntuwolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is...9.8 CriticalwolfsslUbuntuexamples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based...9.8 CriticalwolfsslUbuntuIt was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher...5.9 MediumwolfsslUbuntuwolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on...4.7 MediumwolfsslUbuntuwolfSSL Bleichenbacher/ROBOT7.5 HighwolfsslUbuntuA specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL...8.1 HighwolfsslUbuntuwolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.7.5 HighwolfsslUbuntuwolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka...7.8 HighwolfsslUbuntuIn versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key...5.5 MediumwolfsslUbuntuThe C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...5.5 MediumwolfsslUbuntuThe C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...5.5 MediumwolfsslUbuntuwolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service ...7.5 High