CVE-2021-37155

2021-07-2113:43:01

mitre

www.cve.org

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response.

References

github.com/wolfSSL/wolfssl/pull/3990

github.com/wolfSSL/wolfssl/releases/tag/v4.8.0-stable