1 matches found
CVE-2023-6937 Improper (D)TLS key boundary enforcement
wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a result, it was possible to combine DTLS messages using different keys into one DTLS record. The most extreme edge case is that, in DTLS 1.3, it was possible that an unencrypted DTLS 1.3 record...
5.3CVSS6.2AI score
SaveExploits0References5
20