Buffer overflow

wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a crafted hello client packet over the network to a TLSv1.3 wolfSSL server. The length fields of the packet: record length, client hello length,...

CVE-2019-11873

wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a crafted hello client packet over the network to a TLSv1.3 wolfSSL server. The length fields of the packet: record length, client hello length,...

CVE-2019-11873

wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a crafted hello client packet over the network to a TLSv1.3 wolfSSL server. The length fields of the packet: record length, client hello length,...

CVE-2019-11873

WolfSSL 4.0.0 is affected by a DoPreSharedKeys PSK Identity buffer overflow in tls13.c when identity sizes are mis-sized (max values 2^16). A crafted TLSv1.3 ClientHello could overflow undefined RAM with ~65 KB of attack data, potentially enabling remote code execution. Exploitation details are d...

wolfSSL buffer overflow vulnerability (CNVD-2019-15933)

wolfSSL is a small, portable, embedded SSL/TLS library intended for use by embedded systems developers. A buffer overflow vulnerability exists in DoPreSharedKeys in tls13.c in wolfSSL 4.0.0. An attacker can exploit this vulnerability to achieve remote code execution...