Lucene search
K

CVE-2017-2800

🗓️ 24 May 2017 14:00:00Reported by talosType 
cve
 cve
🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One
9 May 201700:00
zdt
CNVD
wolfSSL Denial of Service Vulnerability (CNVD-2017-09924)
26 May 201700:00
cnvd
Cvelist
CVE-2017-2800
24 May 201714:00
cvelist
Debian CVE
CVE-2017-2800
24 May 201714:00
debiancve
Exploit DB
wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One
9 May 201700:00
exploitdb
exploitpack
wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One
9 May 201700:00
exploitpack
NVD
CVE-2017-2800
24 May 201714:29
nvd
OSV
DEBIAN-CVE-2017-2800
24 May 201714:29
osv
OSV
UBUNTU-CVE-2017-2800
24 May 201714:29
osv
Prion
Remote code execution
24 May 201714:29
prion
Rows per page
NVD
Vulners
Node
wolfsslwolfsslRange3.10.2
[
  {
    "product": "wolfSSL",
    "vendor": "wolfSSL",
    "versions": [
      {
        "status": "affected",
        "version": "3.10.2"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
commonNamepathwolfssl-examples/certfieldsOff-by-one write in wolfSSL_X509_NAME_get_text_by_NID during X.509 name parsing can overflow a stack/heap buffer when certificate fields exceed allocated length, potentially enabling certificate validation issues, DoS, or remote code execution.CWE-193
countryNamepathwolfssl-examples/certfieldsOff-by-one write in wolfSSL_X509_NAME_get_text_by_NID during X.509 name parsing can overflow a stack/heap buffer when certificate fields exceed allocated length, potentially enabling certificate validation issues, DoS, or remote code execution.CWE-193
localityNamepathwolfssl-examples/certfieldsOff-by-one write in wolfSSL_X509_NAME_get_text_by_NID during X.509 name parsing can overflow a stack/heap buffer when certificate fields exceed allocated length, potentially enabling certificate validation issues, DoS, or remote code execution.CWE-193
stateNamepathwolfssl-examples/certfieldsOff-by-one write in wolfSSL_X509_NAME_get_text_by_NID during X.509 name parsing can overflow a stack/heap buffer when certificate fields exceed allocated length, potentially enabling certificate validation issues, DoS, or remote code execution.CWE-193
orgNamepathwolfssl-examples/certfieldsOff-by-one write in wolfSSL_X509_NAME_get_text_by_NID during X.509 name parsing can overflow a stack/heap buffer when certificate fields exceed allocated length, potentially enabling certificate validation issues, DoS, or remote code execution.CWE-193
orgUnitpathwolfssl-examples/certfieldsOff-by-one write in wolfSSL_X509_NAME_get_text_by_NID during X.509 name parsing can overflow a stack/heap buffer when certificate fields exceed allocated length, potentially enabling certificate validation issues, DoS, or remote code execution.CWE-193

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 May 2026 00:24Current
9.4High risk
Vulners AI Score9.4
CVSS 27.5
CVSS 3.19.8
CVSS 38.1
EPSS0.08887
80