wolfssl -- DDoS amplification in DTLS

Sebastian Ramacher identified an error in wolfSSL's implementation of the server side of the DTLS handshake, which could be abused for DDoS amplification or a DoS on the DTLS server itself...

wolfssl -- leakage of private key information

Florian Weimer of Redhat discovered that an optimization in RSA signature validation can result in disclosure of the server's private key under certain fault conditions...

SOL15622 - wolfSSL CyaSSL vulnerability CVE-2013-1623

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL167: Downloading software a...

CVE-2014-2900

wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X.509 certificate...

CVE-2014-2899

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via 1 a request for the peer certificate when a certificate parsing failure occurs or 2 a clientkeyexchange message when the ephemeral key is not found...

Code injection

wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X.509 certificate...

Null pointer dereference

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via 1 a request for the peer certificate when a certificate parsing failure occurs or 2 a clientkeyexchange message when the ephemeral key is not found...

CVE-2014-2900

CVE-2014-2900 affects wolfSSL’s CyaSSL prior to 2.9.4. The vulnerability stems from improper validation of X.509 certificates with unknown critical extensions, enabling MITM attackers to spoof servers via crafted certificates. Affected software: CyaSSL/wolfSSL before 2.9.4. Impact: potential serv...

CVE-2014-2899

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via 1 a request for the peer certificate when a certificate parsing failure occurs or 2 a clientkeyexchange message when the ephemeral key is not found...

CVE-2014-2899

CVE-2014-2899 affects CyaSSL (wolfSSL) prior to 2.9.4. The issue enables remote denial of service via a NULL pointer dereference in two paths: (1) a certificate parsing failure when processing the peer certificate, and (2) a client_key_exchange path when the ephemeral key is not found. The NVD en...

CVE-2014-2900

wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X.509 certificate...

CVE-2013-1623

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks...

Design/Logic Flaw

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks...

CVE-2013-1623

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks...

CVE-2013-1623

Technical details about CVE-2013-1623 are not provided in the connected documents. Monitoring for updates is advised; no product, impact, or remediation specifics are disclosed here.

CVE-2013-1623

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks...