EUVD-2014-2919

Malware in sbrugna...

EUVD-2014-2922

Malware in sbrugna...

EUVD-2014-2923

Malware in sbrugna...

EUVD-2014-2920

Malware in sbrugna...

K15622: wolfSSL CyaSSL vulnerability CVE-2013-1623

Security Advisory Description The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks...

Memory corruption

The DoAlert function in the 1 TLS and 2 DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an out-of-bounds read...

CVE-2014-2896

The DoAlert function in the 1 TLS and 2 DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an out-of-bounds read...

PT-2020-7638

Name of the Vulnerable Software and Affected Versions wolfSSL CyaSSL versions prior to 2.9.4 Description The issue is related to the DoAlert function in the TLS and DTLS implementations, allowing remote attackers to trigger memory corruption or an out-of-bounds read. The estimated number of...

PT-2020-7639

Name of the Vulnerable Software and Affected Versions wolfSSL CyaSSL versions 2.5.0 through 2.9.3 Description The SSL 3 HMAC functionality does not check the padding length when verification fails, allowing remote attackers to have unspecified impact via a crafted HMAC, which triggers an...

PT-2020-7640

Name of the Vulnerable Software and Affected Versions wolfSSL CyaSSL versions prior to 2.9.4 Description The issue allows remote attackers to have an unspecified impact via multiple calls to the CyaSSL read function, which triggers an out-of-bounds read when an error occurs. This is related to no...

CVE-2014-2896: Out-of-bounds Read

The DoAlert function in the 1 TLS and 2 DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an out-of-bounds read...

CVE-2014-2898: Out-of-bounds Read

wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSLread function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verification failure...

WolfSSL CyaSSL Certificate Validation Bypass Vulnerability

WolfSSL CyaSSL is the United States WolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A certificate validation bypass vulnerability exists in WolfSSL CyaSSL. A remote attacker can exploit this vulnerability to spoof a server with a speciall...

SOL15622 - wolfSSL CyaSSL vulnerability CVE-2013-1623

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL167: Downloading software a...

CVE-2014-2900

wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X.509 certificate...

CVE-2014-2899

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via 1 a request for the peer certificate when a certificate parsing failure occurs or 2 a clientkeyexchange message when the ephemeral key is not found...

CVE-2014-2899

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via 1 a request for the peer certificate when a certificate parsing failure occurs or 2 a clientkeyexchange message when the ephemeral key is not found...

PT-2014-4952

Name of the Vulnerable Software and Affected Versions wolfSSL CyaSSL versions prior to 2.9.4 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference. This can occur in two scenarios: 1 when a request is made for the peer certificate and ...

CVE-2013-1623

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks...

CVE-2013-1623: Undefined Security Weakness

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks...