Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT that stems from the product's failure to properly determine memory boundaries when calling MqttDecodePublish from...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT that stems from the product's failure to properly determine memory boundaries when calling MqttClientDecodePacket...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT that stems from the failure of the product's MqttClientWaitType and MqttClientConnect to correctly determine memor...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for embedded systems developers from Wolfssl, Inc. in the United States. Wolfssl wolfMQTT 1.9 suffers from a buffer error vulnerability that stems from a heap-based buffer overflow 4 bytes in MqttDecodePublish called from...

CVE-2021-45932

CVE-2021-45932 affects wolfSSL wolfMQTT 1.9. A heap-based buffer overflow of 4 bytes occurs in MqttDecode_Publish (invoked via MqttClient_DecodePacket and MqttClient_HandlePacket). Reported impact per NVD indicates partial availability impact; exploitation status is not documented in the provided...

CVE-2021-45932

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 4 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...

CVE-2021-45933

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 8 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...

CVE-2021-45933

The vulnerability CVE-2021-45933 affects wolfSSL wolfMQTT 1.9. A heap-based buffer overflow (8 bytes) occurs in MqttDecode_Publish, called from MqttClient_DecodePacket and MqttClient_HandlePacket. The root cause is improper memory boundary handling in that function. The impact is not elaborated b...

CVE-2021-45934

The CVE-2021-45934 entry concerns wolfSSL wolfMQTT 1.9 and a heap-based buffer overflow in MqttClient_DecodePacket (invoked by MqttClient_HandlePacket and MqttClient_WaitType). The issue is rooted in how packets are decoded, potentially enabling an overflow condition when handling MQTT packets. C...

CVE-2021-45934

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientHandlePacket and MqttClientWaitType...

CVE-2021-45936

CVE-2021-45936 affects wolfSSL wolfMQTT 1.9. The vulnerability is a heap-based buffer overflow in MqttDecode_Disconnect, invoked from MqttClient_DecodePacket and MqttClient_WaitType. Affected component is wolfMQTT’s MQTT decoding path; exploitation could lead to memory corruption. The NVD entry l...

CVE-2021-45937

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientConnect...

CVE-2021-45937

wolfSSL wolfMQTT 1.9 is affected by a heap-based buffer overflow in MqttClient_DecodePacket, invoked from MqttClient_WaitType and MqttClient_Connect. The vulnerability is described across multiple sources (CVE-2021-45937) with root cause in memory boundary checks during decoding; impact includes ...

CVE-2021-45938

CVE-2021-45938 affects wolfSSL wolfMQTT 1.9. The issue is a heap-based buffer overflow in MqttClient_DecodePacket, triggered via MqttClient_WaitType and MqttClient_Unsubscribe. Root cause described as failure to properly determine memory boundaries. No remediation details are provided in the conn...

CVE-2021-45938

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientUnsubscribe...

CVE-2021-45939

The CVE-2021-45939 entry concerns wolfSSL wolfMQTT 1.9, where a heap-based buffer overflow occurs in MqttClient_DecodePacket (triggered by MqttClient_WaitType and MqttClient_Subscribe). The connected documents confirm the affected component and the root cause (memory boundary mismanagement leadin...

CVE-2021-45939

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...

CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...

DEBIAN-CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension...