CVE-2014-2903

2017-10-0615:00:00

mitre

www.cve.org

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

51.7%

JSON

CyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers to spoof servers via a crafted server certificate not authorized for use in an SSL/TLS handshake.

References

secunia.com/advisories/62604

www.openwall.com/lists/oss-security/2014/04/18/2