wolfSSL 安全漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, Inc. in the United States. A security vulnerability exists in wolfSSL due to an observable timing difference in base64 PEM decoding. A local user could gain access to sensitiv...

wolfssl:fuzzer-wolfssl-server: Heap-buffer-overflow in Hmac_UpdateFinal_CT

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4687442526470144 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-server Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

wolfssl:cryptofuzz-disable-fastmath: Use-of-uninitialized-value in wc_Sha512Update

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6644639930122240 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-disable-fastmath Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

wolfssl:cryptofuzz-sp-math-all: Use-of-uninitialized-value in wc_edNUMBER_make_key

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5639698583257088 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-sp-math-all Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

wolfssl:cryptofuzz-sp-math-all: Index-out-of-bounds in sp_lshb

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6311264870596608 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-sp-math-all Job Type: libfuzzerubsanwolfssl Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

wolfssl

This repository is an implementation of the wolfSSL library, a cryptographic library for secure communication. The library is designed to be used with various platforms, including Arduino, and provides a range of cryptographic functions for secure data transmission. The repository contains a...

wolfssl:fuzzer-wolfssl-ocsp: Segv on unknown address in GetASNHeader_ex

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5641031927332864 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-ocsp Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cras...

wolfssl:fuzzer-wolfssl-ocsp: Stack-buffer-overflow in DecodeSingleResponse

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5404351943278592 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: fuzzer-wolfssl-ocsp Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

wolfssl:fuzzer-wolfssl-misc: Heap-buffer-overflow in Base64_SkipNewline

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5374478818344960 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-misc Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

wolfssl:cryptofuzz-disable-fastmath: Crash in mp_is_bit_set

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4939443598393344 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-disable-fastmath Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

PT-2021-28132

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs during the wolfSSL connect function in the client.c file. This is indicated by a crash type of Heap-buffer-overflow READ 1. T...

wolfssl:fuzzer-wolfssl-client: Heap-buffer-overflow in ProcessReply

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5064363242291200 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-client Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

wolfssl:cryptofuzz-openssl-api: Heap-buffer-overflow in AES_GCM_encrypt_C

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5037907683442688 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-api Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

wolfssl:cryptofuzz-sp-math-all: Heap-buffer-overflow in sp_exch

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5048660536721408 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-sp-math-all Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash...

wolfssl:fuzzer-wolfssh-server-randomize: Use-of-uninitialized-value in memory_test

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6342559423135744 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server-randomize Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

wolfssl:cryptofuzz-sp-math: Use-of-uninitialized-value in sp_read_unsigned_bin

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6041040513531904 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-sp-math Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

wolfssl:cryptofuzz-sp-math: Heap-buffer-overflow in sp_copy

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4666334308859904 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-sp-math Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 12 Crash...

wolfssl:fuzzer-wolfssl-client: Heap-buffer-overflow in ProcessPeerCerts

Detailed Report: https://oss-fuzz.com/testcase?key=4956409789808640 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssl-client Job Type: aflasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60e0000001c8 Crash State: ProcessPeerCerts DoCertificat...

wolfssl:fuzzer-wolfssh-server-randomize: Crash in wolfCrypt_custom_free

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5067074219147264 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server-randomize Job Type: libfuzzerubsanwolfssl Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

wolfssl:fuzzer-wolfssh-server-randomize: Crash in mp_read_unsigned_bin

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5912002306375680 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server-randomize Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...