Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46366
HistoryApr 11, 2024 - 2:05 a.m.

Improper Validation Of Array Index

2024-04-1102:05:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
improper validation
array index
vulnerable
input validation
malicious packet

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

EPSS

0

Percentile

9.0%

wolfssl:edge is vulnerable to Improper Validation of Array Index. The vulnerability is due to lack of proper input validation, allowing a malicious packet sender to crash or cause an out-of-bounds read by sending a malformed packet with the correct length.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

EPSS

0

Percentile

9.0%