Lucene search
K

7 matches found

EUVD
EUVD
added 2025/11/22 12:31 a.m.2 views

EUVD-2025-198525

Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions...

2.3CVSS6.4AI score0.00064EPSS
Exploits0References3
OSV
OSV
added 2025/11/21 11:15 p.m.1 views

DEBIAN-CVE-2025-11933

Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions...

6.5CVSS5.4AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2025/11/21 11:15 p.m.2 views

CVE-2025-11933

Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions...

6.5CVSS0.00064EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2025/11/21 10:19 p.m.5 views

CVE-2025-11933

Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions...

6.5CVSS6.8AI score0.00064EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/11/21 10:19 p.m.2 views

CVE-2025-11933 DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension

Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions...

2.3CVSS6.5AI score0.00064EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/11/21 10:19 p.m.8 views

CVE-2025-11933

Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions...

6.5CVSS5.4AI score0.00064EPSS
Exploits0
CNNVD
CNNVD
added 2025/11/21 12:0 a.m.2 views

wolfSSL 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from wolfSSL, Inc. in the United States. A security vulnerability exists in wolfSSL version 5.8.2 and earlier, which stems from improper validation of the TLS 1.3 CKS extension parsing inpu...

6.5CVSS6.3AI score0.00064EPSS
Exploits0References3
Rows per page
Query Builder