CVE-2022-38153

🗓️ 31 Aug 2022 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 66 Views

An issue in wolfSSL before 5.5.0 (with --enable-session-ticket) allows attackers to crash TLS 1.2 clients by injecting a large ticket into a NewSessionTicket message. Exploitable in version 5.3.0 only

Reporter	Title	Published	Views	Family All 15
0day.today	wolfSSL 5.3.0 Denial Of Service Vulnerability	22 Jan 202300:00	–	zdt
ATTACKERKB	CVE-2022-38153	31 Aug 202218:15	–	attackerkb
Circl	CVE-2022-38153	31 Aug 202222:50	–	circl
CNNVD	Wolfssl 安全漏洞	31 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-38153	31 Aug 202200:00	–	cvelist
Debian CVE	CVE-2022-38153	31 Aug 202200:00	–	debiancve
EUVD	EUVD-2022-40750	3 Oct 202520:07	–	euvd
NVD	CVE-2022-38153	31 Aug 202218:15	–	nvd
OSV	DEBIAN-CVE-2022-38153	31 Aug 202218:15	–	osv
OSV	UBUNTU-CVE-2022-38153	31 Aug 202218:15	–	osv

NVD

Node

wolfssl wolfsslMatch5.3.0

Source	Link
seclists	www.seclists.org/fulldisclosure/2023/Jan/8
github	www.github.com/wolfSSL/wolfssl/releases
github	www.github.com/trailofbits/tlspuffin
packetstormsecurity	www.packetstormsecurity.com/files/170605/wolfSSL-5.3.0-Denial-Of-Service.html
blog	www.blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/
wolfssl	www.wolfssl.com/docs/security-vulnerabilities/
github	www.github.com/wolfSSL/wolfssl/pull/5476

21 Nov 2024 07:15Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.9

EPSS0.00568

CWE-770