CVE-2022-34293

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

UBUNTU-CVE-2022-34293

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

Design/Logic Flaw

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

CVE-2022-34293

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

CVE-2022-34293

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

CVE-2022-34293

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

CVE-2022-34293

wolfSSL before 5.4.0 is vulnerable to a DTLS denial-of-service because a return-routability check can be skipped. This is the explicit affected condition: wolfSSL versions prior to 5.4.0 may be exploited remotely to cause service disruption. The available connected documents consistently indicate...

CVE-2022-34293

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

CVE-2022-34293

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

Wolfssl 安全漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for embedded systems developers from Wolfssl, Inc. A security vulnerability exists in Wolfssl versions prior to 5.4.0, which stems from the fact that its return route check can be bypassed to allow an attacker to implement a...

CVE-2022-34293: Undefined Security Weakness

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

PT-2022-22109 · Wolfssl +2 · Wolfssl +2

Name of the Vulnerable Software and Affected Versions: wolfSSL versions prior to 5.4.0 Description: The issue allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped. Recommendations: For versions prior to 5.4.0, update to version 5.4.0 ...

wolfssl:cryptofuzz-sp-math: Heap-buffer-overflow in sp_ecc_mulmod_384

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6049283719168000 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-sp-math Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

wolfssl:cryptofuzz-sp-math: Heap-buffer-overflow in sp_ecc_secret_gen_256

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6008055086579712 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-sp-math Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

wolfssl:cryptofuzz-normal-math: Heap-buffer-overflow in sp_div

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5582135427203072 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-normal-math Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address...

wolfssl:cryptofuzz-disable-fastmath: Heap-buffer-overflow in sp_div

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5175334403702784 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-disable-fastmath Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

Denial Of Service (DoS)

wolfssl is vulnerable to denial of service. The vulnerability exists due to an implementation error in DTLS, allowing an attacker to crash the application...

wolfssl:fuzzer-wolfssh-client: Use-of-uninitialized-value in GetIntPositive

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5358876215607296 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

wolfssl -- multiple issues

wolfSSL blog reports: In release 5.4.0 there were 3 vulnerabilities listed as fixed in wolfSSL. Two relatively new reports, one dealing with a DTLS 1.0/1.2 denial of service attack and the other a ciphertext attack on ECC/DH operations. The last vulnerability listed was a public disclosure of a...

wolfssl:fuzzer-wolfssh-server: Use-of-uninitialized-value in DoUserAuthRequest

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6194241493139456 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...