CVE-2024-5991 Buffer overread in domain name matching

🗓️ 27 Aug 2024 18:33:27Reported by GoogleType

osv

osv🔗 osv.dev👁 20 Views

Unvalidated input in MatchDomainName() can lead to buffer overflo

Reporter	Title	Published	Views	Family All 31
FreeBSD	netatalk3 -- multiple WolfSSL vulnerabilities	8 Sep 202400:00	–	freebsd
AlpineLinux	CVE-2024-5991	27 Aug 202418:33	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: mariadb (CVE-2024-5991)	10 Feb 202500:00	–	nessus
Tenable Nessus	FreeBSD : netatalk3 -- multiple WolfSSL vulnerabilities (8fbe81f7-6eb5-11ef-b7bd-00505632d232)	10 Sep 202400:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: mariadb (CVE-2024-5991)	13 Dec 202400:00	–	nessus
Tenable Nessus	Slackware Linux 15.0 / current netatalk Multiple Vulnerabilities (SSA:2024-253-01)	9 Sep 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-5991	6 Mar 202500:00	–	nessus
BDU FSTEC	The vulnerability of the MatchDomainName() function in the SSL/TLS library WolfSSL allows a attacker to influence the accessibility of protected information.	20 Sep 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-5991 affecting package mariadb for versions less than 10.6.9-4	10 Aug 202316:37	–	cbl_mariner
CBLMariner	CVE-2024-5991 affecting package mariadb for versions less than 10.6.9-6	23 Jul 202402:21	–	cbl_mariner

Source	Link
https	www.https//github.com/wolfSSL/wolfssl/pull/7604
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/5xxx/CVE-2024-5991.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-5991
github	www.github.com/wolfSSL/wolfssl/pull/7604

16 Jul 2026 03:47Current

7High risk

Vulners AI Score7

CVSS 410

EPSS0.0056

cve-2024-5991 matchdomainname input validation buffer overflow x509_check_host wolfssl software vulnerability