2302 matches found
PT-2025-47810
Name of the Vulnerable Software and Affected Versions wolfSSL versions 5.8.2 and earlier Description A flaw exists in the processing of TLS 1.3 CKS extensions within wolfSSL. This improper input validation can be triggered by a specially crafted ClientHello message containing duplicate CKS...
PT-2025-47811
Name of the Vulnerable Software and Affected Versions wolfSSL versions 5.8.2 and earlier Description A flaw exists in the TLS 1.3 CertificateVerify signature algorithm negotiation within wolfSSL. This issue allows for a downgrade in the signature algorithm used during the TLS handshake...
PT-2025-47818
Name of the Vulnerable Software and Affected Versions wolfSSL version 5.8.2 Description A flaw exists in the TLS 1.3 KeyShareEntry parsing within wolfSSL. This issue allows a remote, unauthenticated attacker to trigger a denial-of-service condition. The attack involves sending a specially crafted...
wolfSSL 安全漏洞
wolfSSL CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from wolfSSL, Inc. in the United States. A security vulnerability exists in wolfSSL CyaSSL versions 5.8.2 and earlier, which stems from improper validation of the TLS 1.3 CertificateVerify...
CVE-2025-11934: Improper Input Validation
Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously...
CVE-2025-11933: Improper Input Validation
Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions...
Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2024-2379)
libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems. This plugin only works wi...
CVE-2025-10966
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more...
Linux Distros Unpatched Vulnerability : CVE-2025-7395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A certificate verification error in wolfSSL when building with the WOLFSSLSYSCACERTS and WOLFSSLAPPLENATIVECERTVALIDATION options results in the wolfSSL client...
EUVD-2017-17796
Malware in sbrugna...
EUVD-2018-4407
Malware in sbrugna...
EUVD-2013-1658
Malware in sbrugna...
EUVD-2014-2919
Malware in sbrugna...
EUVD-2014-2920
Malware in sbrugna...
EUVD-2014-2922
Malware in sbrugna...
EUVD-2014-2921
Malware in sbrugna...
EUVD-2014-2923
Malware in sbrugna...
EUVD-2014-2924
Malware in sbrugna...