Lucene search

K
cvelistMitreCVELIST:CVE-2014-2897
HistoryJan 28, 2020 - 3:41 p.m.

CVE-2014-2897

2020-01-2815:41:59
mitre
www.cve.org
7

AI Score

9.6

Confidence

High

EPSS

0.005

Percentile

76.1%

The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows remote attackers to have unspecified impact via a crafted HMAC, which triggers an out-of-bounds read.

AI Score

9.6

Confidence

High

EPSS

0.005

Percentile

76.1%

Related for CVELIST:CVE-2014-2897