Skip to contentWolfssl vulnerabilities
Newest
- wolfsslIn wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks.CVE-2019-19960Fix available5.3 Medium
- wolfsslwolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in...CVE-2019-19962Fix available7.5 High
- wolfsslAn issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is...CVE-2019-19963Fix available5.3 Medium
- wolfsslwolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces....CVE-2019-14317Fix available5.3 Medium
- wolfsslwolfssl before 3.2.0 has a server certificate that is not properly authorized for server...CVE-2014-2904Fix available7.5 High
- wolfsslwolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates.CVE-2014-2902Fix available7.5 High
- wolfsslwolfssl before 3.2.0 does not properly issue certificates for a server's hostname.CVE-2014-2901Fix available7.5 High
- wolfsslIn wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing...CVE-2019-18840Fix available7.5 High
- wolfsslwolfCrypt leaks cryptographic information via timing side channelCVE-2019-13628Fix available4.7 Medium
- wolfsslIn wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1...CVE-2019-16748Fix available9.8 Critical
- wolfsslwolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src...CVE-2019-15651Fix available9.8 Critical
- wolfsslwolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is...CVE-2019-11873Fix available9.8 Critical
- wolfsslexamples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based...CVE-2019-6439Fix available9.8 Critical
- wolfsslIt was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher...CVE-2018-16870Fix available5.9 Medium
- wolfsslwolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on...CVE-2018-12436Fix available4.7 Medium
- wolfssl, arubanetworks instant, siemens scalance w1750d firmware +2 morewolfSSL Bleichenbacher/ROBOTCVE-2017-13099Fix availableEPSS 27.4%7.5 High
- wolfsslCyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers...CVE-2014-2903Fix available5.9 Medium
- wolfsslA specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL...CVE-2017-2800Public exploitFix available8.1 High
- wolfsslwolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.CVE-2017-8855Fix available7.5 High
- wolfsslwolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka...CVE-2017-8854Fix available7.8 High
- wolfsslIn versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key...CVE-2017-6076Fix available5.5 Medium
- wolfsslThe C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...CVE-2016-7439Fix available5.5 Medium
- wolfsslThe C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...CVE-2016-7438Fix available5.5 Medium
- wolfssl, debian linux, mariadb +1 more +3 moreThe C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL)...CVE-2016-7440Fix available5.5 Medium
- wolfssl, mariadb, opensuse leap +1 more +3 morewolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the...CVE-2015-7744Fix available5.9 Medium
- wolfsslwolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service ...CVE-2015-6925Fix available7.5 High
- oracle mysql, wolfssl yassl, canonical ubuntu linux +2 more +4 moreMultiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in...CVE-2009-4484Public exploitEPSS 69.6%7.5 High