CVE-2021-45932

CVE-2021-45932 affects wolfSSL wolfMQTT 1.9. A heap-based buffer overflow of 4 bytes occurs in MqttDecode_Publish (invoked via MqttClient_DecodePacket and MqttClient_HandlePacket). Reported impact per NVD indicates partial availability impact; exploitation status is not documented in the provided...

CVE-2021-45933

The vulnerability CVE-2021-45933 affects wolfSSL wolfMQTT 1.9. A heap-based buffer overflow (8 bytes) occurs in MqttDecode_Publish, called from MqttClient_DecodePacket and MqttClient_HandlePacket. The root cause is improper memory boundary handling in that function. The impact is not elaborated b...

CVE-2021-45933

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 8 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...

CVE-2021-45934

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientHandlePacket and MqttClientWaitType...

CVE-2021-45934

The CVE-2021-45934 entry concerns wolfSSL wolfMQTT 1.9 and a heap-based buffer overflow in MqttClient_DecodePacket (invoked by MqttClient_HandlePacket and MqttClient_WaitType). The issue is rooted in how packets are decoded, potentially enabling an overflow condition when handling MQTT packets. C...

CVE-2021-45936

CVE-2021-45936 affects wolfSSL wolfMQTT 1.9. The vulnerability is a heap-based buffer overflow in MqttDecode_Disconnect, invoked from MqttClient_DecodePacket and MqttClient_WaitType. Affected component is wolfMQTT’s MQTT decoding path; exploitation could lead to memory corruption. The NVD entry l...

CVE-2021-45937

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientConnect...

CVE-2021-45937

wolfSSL wolfMQTT 1.9 is affected by a heap-based buffer overflow in MqttClient_DecodePacket, invoked from MqttClient_WaitType and MqttClient_Connect. The vulnerability is described across multiple sources (CVE-2021-45937) with root cause in memory boundary checks during decoding; impact includes ...

CVE-2021-45938

CVE-2021-45938 affects wolfSSL wolfMQTT 1.9. The issue is a heap-based buffer overflow in MqttClient_DecodePacket, triggered via MqttClient_WaitType and MqttClient_Unsubscribe. Root cause described as failure to properly determine memory boundaries. No remediation details are provided in the conn...

CVE-2021-45938

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientUnsubscribe...

CVE-2021-45939

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...

CVE-2021-45939

The CVE-2021-45939 entry concerns wolfSSL wolfMQTT 1.9, where a heap-based buffer overflow occurs in MqttClient_DecodePacket (triggered by MqttClient_WaitType and MqttClient_Subscribe). The connected documents confirm the affected component and the root cause (memory boundary mismanagement leadin...

CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

DEBIAN-CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

Code injection

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

UBUNTU-CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension. Remediation Upgrade wolfssl to version 4.8.1 ...