Lucene search
+L

10026 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/10 3:24 a.m.4 views

CVE-2026-5188

An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name SAN extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect...

2.3CVSS5.9AI score0.00135EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/10 3:24 a.m.7 views

CVE-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSL

An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name SAN extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect...

2.3CVSS6.1AI score
SaveExploits0References4
CVE
CVE
added 2026/04/10 3:24 a.m.30 views

CVE-2026-5188

CVE-2026-5188 describes an integer underflow in wolfSSL when parsing the SAN extension of X.509 certificates. A malformed certificate may specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This vulnerability is limited to config...

8.1CVSS5.9AI score0.00135EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2026/04/10 3:24 a.m.18 views

CVE-2026-5188

An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name SAN extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect...

8.1CVSS5.3AI score0.00135EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/04/10 3:24 a.m.5 views

CVE-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSL

An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name SAN extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect...

2.3CVSS5.8AI score0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/10 3:24 a.m.34 views

CVE-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSL

An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name SAN extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect...

2.3CVSS0.00135EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/04/10 3:24 a.m.14 views

CVE-2026-5188

An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name SAN extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect...

8.1CVSS5.3AI score0.00135EPSS
SaveExploits0
EUVD
EUVD
added 2026/04/10 12:30 a.m.8 views

EUVD-2026-21220

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

2.1CVSS5.9AI score0.00225EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-5188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name SAN extension of X.509 certificates. A malformed certificate can specify ...

8.1CVSS5.5AI score0.00135EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:0 a.m.5 views

Unity Linux 20.1070e Security Update: openldap (UTSA-2026-007094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007094 advisory. OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline function...

4.6CVSS6AI score0.00132EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.15 views

wolfSSL 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the American company wolfSSL, aimed at developers working with embedded systems. wolfSSL has a security vulnerability that stems from an integer underflow issue during the parsing of X.509 certificates, which may le...

8.1CVSS5.8AI score0.00135EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.13 views

PT-2026-31861

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name SAN extension of X.509 certificates. A malformed certificate can specify an entry length larger than the...

2.3CVSS5.8AI score0.00135EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/04/09 11:8 p.m.20 views

Integer Underflow (Wrap or Wraparound)

Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound via the sslDecodePacket process. An attacker can cause a program crash and trigger a large out-of-bounds read by injecting a malformed TLS Application Data record that is shorter than the required...

6.5CVSS5.8AI score0.00225EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/09 10:16 p.m.9 views

DEBIAN-CVE-2026-5778

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

6.5CVSS5.4AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/09 10:16 p.m.13 views

CVE-2026-5778

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

6.5CVSS0.00225EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/09 9:45 p.m.3 views

CVE-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

2.1CVSS5.8AI score0.00225EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/09 9:45 p.m.6 views

CVE-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

2.1CVSS6.1AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/09 9:45 p.m.8 views

CVE-2026-5778

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

2.1CVSS5.9AI score0.00225EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/04/09 9:45 p.m.34 views

CVE-2026-5778

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

6.5CVSS5.4AI score0.00225EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/04/09 9:45 p.m.38 views

CVE-2026-5778

Integer underflow in wolfSSL packet sniffer = 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large valu...

6.5CVSS5.4AI score0.00225EPSS
SaveExploits0
Rows per page
Query Builder