CVE-2020-24585

2020-08-2114:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

JSON

An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application.

CPENameOperatorVersion
wolfssleq2.8.6
wolfssleq3.9.10b
wolfssleq3.6.9
wolfssleq3.6.9c
wolfssleq3.3.3
wolfssleq3.12.0-stable
wolfssleq3.15.6
wolfssleqWCv4.0-RC5
wolfssleq4.0.0-stable
wolfssleq2.4.7

Name	Operator	Version
wolfssl	eq	2.8.6
wolfssl	eq	3.9.10b
wolfssl	eq	3.6.9
wolfssl	eq	3.6.9c
wolfssl	eq	3.3.3
wolfssl	eq	3.12.0-stable
wolfssl	eq	3.15.6
wolfssl	eq	WCv4.0-RC5
wolfssl	eq	4.0.0-stable
wolfssl	eq	2.4.7