1661 matches found
CVE-2021-45937
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientConnect...
CVE-2021-45937
wolfSSL wolfMQTT 1.9 is affected by a heap-based buffer overflow in MqttClient_DecodePacket, invoked from MqttClient_WaitType and MqttClient_Connect. The vulnerability is described across multiple sources (CVE-2021-45937) with root cause in memory boundary checks during decoding; impact includes ...
CVE-2021-45938
CVE-2021-45938 affects wolfSSL wolfMQTT 1.9. The issue is a heap-based buffer overflow in MqttClient_DecodePacket, triggered via MqttClient_WaitType and MqttClient_Unsubscribe. Root cause described as failure to properly determine memory boundaries. No remediation details are provided in the conn...
CVE-2021-45938
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientUnsubscribe...
CVE-2021-45939
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...
CVE-2021-45939
The CVE-2021-45939 entry concerns wolfSSL wolfMQTT 1.9, where a heap-based buffer overflow occurs in MqttClient_DecodePacket (triggered by MqttClient_WaitType and MqttClient_Subscribe). The connected documents confirm the affected component and the root cause (memory boundary mismanagement leadin...
CVE-2021-38597
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...
CVE-2021-38597
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...
DEBIAN-CVE-2021-38597
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...
Code injection
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...
UBUNTU-CVE-2021-38597
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...
CVE-2021-38597
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...
CVE-2021-38597
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...
Insufficient Verification of Data Authenticity
Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension. Remediation Upgrade wolfssl to version 4.8.1 ...
CVE-2021-38597
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...
CVE-2021-38597
CVE-2021-38597 affects wolfSSL before 4.8.1, where OCSP verification can be skipped in certain cases involving unrelated response data containing the NoCheck extension. The vulnerability’s impact is recorded as partial confidentiality exposure (CVSSv2/3.1 base score ~4.3–5.9). Connected sources r...
CVE-2021-38597
wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...
wolfSSL 数据伪造问题漏洞
Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, Inc. in the United States. A security vulnerability exists in wolfSSL that stems from incorrectly skipping OCSP validation under certain circumstances containing extraneous...