CVE-2024-2873 User authentication bypass in wolfSSH server

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access...

CVE-2024-2873

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access...

CVE-2024-2873

CVE-2024-2873 affects wolfSSH’s server-side state machine prior to 1.4.17. A malicious client could create channels without first authenticating, resulting in unauthorized access (confidentiality and integrity impact reported; availability not affected). Affected: wolfSSH versions before 1.4.17. ...

CVE-2024-2873 User authentication bypass in wolfSSH server

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access...

CVE-2024-2873 User authentication bypass in wolfSSH server

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access...

WolfSSH security vulnerability

wolfSSH is a small, fast, and portable implementation of SSH, including support for SCP and SFTP. A security vulnerability exists in wolfSSH versions prior to 1.4.17. An attacker could use this vulnerability to create a channel without first performing user authentication, which could lead to...

CVE-2024-2873: Improper Authentication

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access...

wolfssl:fuzzer-wolfssh-client-randomize: Use-of-uninitialized-value in DoChannelRequest

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5922586155155456 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

wolfssl:fuzzer-wolfssh-client: Heap-buffer-overflow in DoChannelRequest

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6324756893532160 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

wolfssl:fuzzer-wolfssh-client-randomize: Use-of-uninitialized-value in fuzzer_send

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5153017503285248 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

wolfssl:fuzzer-wolfssh-client-randomize: Use-of-uninitialized-value in fuzzer_send

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6443666340970496 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

PT-2023-35855 · Wolfssh · Wolfssh

Name of the Vulnerable Software and Affected Versions: wolfSSH affected versions not specified Description: The issue is related to a heap buffer overflow, which can cause a crash. The crash occurs in the wolfSSH shutdown function, specifically when handling a BundlePacket and SendChannelExit...

wolfssl:fuzzer-wolfssh-client-randomize: Heap-buffer-overflow in BundlePacket

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6341560443469824 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9...

Exploit for Integer Overflow or Wraparound in Wolfssh

Python program to detect vulnerability with CVE-2022-32073 in...

wolfssl:fuzzer-wolfssh-client: Heap-buffer-overflow in ParseAndVerifyCert

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5875211156717568 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

wolfssl:fuzzer-wolfssh-client: Heap-buffer-overflow in sp_forcezero

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6242178480865280 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

wolfssl:fuzzer-wolfssh-client: Use-of-uninitialized-value in wc_FreeRsaKey

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6086572889473024 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

wolfssl:fuzzer-wolfssh-client-randomize: Heap-buffer-overflow in ParseAndVerifyCert

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5451204620058624 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

wolfssl:fuzzer-wolfssh-client-randomize: Heap-buffer-overflow in DoUserAuthRequest

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4970017363460096 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

wolfssl:fuzzer-wolfssh-server-randomize: Use-of-uninitialized-value in sp_clear

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6364113307041792 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server-randomize Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...