Wolfssl Inc. Wolfssh vulnerabilities
- wolfssh wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion 6.9 Medium
- wolfssh wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms 5.3 Medium
- wolfssh wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check 6.3 Medium
- wolfssh wolfSSH ECDSA host key curve not validated against negotiated algorithm 9.0 Critical
- wolfssh User authentication bypass in wolfSSH server 9.1 Critical