PT-2020-7639

Name of the Vulnerable Software and Affected Versions wolfSSL CyaSSL versions 2.5.0 through 2.9.3 Description The SSL 3 HMAC functionality does not check the padding length when verification fails, allowing remote attackers to have unspecified impact via a crafted HMAC, which triggers an...