CVE-2021-37155

wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response...

CVE-2021-37155

CVE-2021-37155 affects wolfSSL 4.6.x through 4.7.x before 4.8.0, where an OCSP serial-number mismatch does not produce a failure outcome, per multiple sources. The vulnerability is tied to OCSP response handling in the affected wolfSSL versions; the publicly documented impact is a failure in vali...