CVE-2020-24585

An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS applicationdata messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application...

CVE-2020-24585

The CVE-2020-24585 entry concerns wolfSSL’s DTLS handshake prior to version 4.5.0, where Clear DTLS application_data messages in epoch 0 do not trigger an out‑of‑order error but are instead returned to the application. Affected component is the DTLS handshake implementation in wolfSSL before 4.5....