wolfssl vulnerabilities (Ubuntu)
146 vulnerabilities.
wolfsslUbuntuHeap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.36.3 MediumwolfsslUbuntu1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore2.3 LowwolfsslUbuntuwolfSSL heap OOB read in PKCS7 SignedData streaming2.3 LowwolfsslUbuntuOOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS6.3 MediumwolfsslUbuntuStack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID5.9 MediumwolfsslUbuntuout-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName6.9 MediumwolfsslUbuntuPKCS7 CBC Padding Oracle — Plaintext Recovery6.3 MediumwolfsslUbuntuSession Cache Restore — Arbitrary Free via Deserialized Pointer4.1 MediumwolfsslUbuntuMatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation2.1 LowwolfsslUbuntuInteger underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.2.1 LowwolfsslUbuntuDTLS 1.3 ACK heap buffer overflow8.3 HighwolfsslUbuntuURI nameConstraints not enforced in ConfirmNameConstraints()7.0 HighwolfsslUbuntuwolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse6.0 MediumwolfsslUbuntuHeap buffer overflow in CertFromX509() via AuthorityKeyIdentifier6.3 MediumwolfsslUbuntuHeap Out-of-Bounds Write in DecodeObjectId() in wolfSSL2.3 LowwolfsslUbuntuwolfSSL ECDSA Certificate Verification9.3 CriticalwolfsslUbuntuwc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read1.2 LowwolfsslUbuntuInteger Overflow in Certificate Chain Allocation1.2 LowwolfsslUbuntuImproper key_share validation in TLS 1.3 HelloRetryRequest1.2 LowwolfsslUbuntuHeap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path1.3 LowwolfsslUbuntuBuffer Overflow in HPKE via Oversized ECH Config6.9 MediumwolfsslUbuntuwolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation7.5 HighwolfsslUbuntuECH parsing heap buffer overflow8.3 HighwolfsslUbuntuCompiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V2.1 LowwolfsslUbuntuNon-constant time multiplication subroutine __muldi3 on RISC-V RV32I2.1 LowwolfsslUbuntuFault injection attack with ML-DSA and ML-KEM on ARM4.3 MediumwolfsslUbuntuBuffer overflow in CRL number parsing in wolfSSL7.2 HighwolfsslUbuntuHeap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function5.0 MediumwolfsslUbuntuAcceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.25.5 MediumwolfsslUbuntuInteger underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path2.1 LowwolfsslUbuntuStack buffer overflow in PKCS7 SignedData encoding with custom signed attributes2.2 LowwolfsslUbuntuPotential non-constant time compiled code with Clang LLVM1.0 LowwolfsslUbuntuTLS 1.2 Client Can Downgrade Digest Used2.3 LowwolfsslUbuntuTiming Side-Channel in PSK Binder Verification2.3 LowwolfsslUbuntuInteger Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt2.1 LowwolfsslUbuntuConstant Time Issue with Xtensa-based ESP32 and X225191.0 LowwolfsslUbuntuPotential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello6.3 MediumwolfsslUbuntuDoS Vulnerability in wolfSSL TLS 1.3 CKS Extension2.3 LowwolfsslUbuntuImproper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify2.1 LowwolfsslUbuntuForward Secrecy Violation in WolfSSL TLS 1.36.3 MediumwolfsslUbuntuCurve25519 Blinding5.6 MediumwolfsslUbuntuIn the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as...7.0 HighwolfsslUbuntuDomain Name Validation Bypass with Apple Native Certificate Validation9.2 CriticalwolfsslUbuntuFault Injection of EdDSA signature in WolfCrypt6.7 MediumwolfsslUbuntuAES T-Table sub-cache-line leakage4.1 MediumwolfsslUbuntuECDSA nonce bias caused by truncation4.1 MediumwolfsslUbuntuUnverifed Ciphersuite used on a client-side TLS1.3 Downgrade5.1 MediumwolfsslUbuntuSafe-error attack on TLS 1.3 Protocol5.1 MediumwolfsslUbuntuBuffer overread in domain name matching10.0 CriticalwolfsslUbuntuFault Injection of RSA encryption in WolfCrypt5.9 Medium- Show moreLoading…