Vulnerabilities > Wolfssl

DATE CVE VULNERABILITY TITLE RISK
2022-11-07 CVE-2022-42905 Out-of-bounds Read vulnerability in Wolfssl
In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS 1.3 client or network attacker can trigger a buffer over-read on the heap of 5 bytes.
network
low complexity
wolfssl CWE-125
critical
9.1
2022-10-15 CVE-2022-42961 Unspecified vulnerability in Wolfssl
An issue was discovered in wolfSSL before 5.5.0.
network
low complexity
wolfssl
5.3
2022-09-29 CVE-2022-39173 Classic Buffer Overflow vulnerability in Wolfssl
In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake.
network
low complexity
wolfssl CWE-120
7.5
2022-02-24 CVE-2022-25638 Improper Certificate Validation vulnerability in Wolfssl
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server.
network
wolfssl CWE-295
4.3
2022-02-24 CVE-2022-25640 Improper Authentication vulnerability in Wolfssl
In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication.
network
low complexity
wolfssl CWE-287
5.0
2022-01-18 CVE-2022-23408 Use of Insufficiently Random Values vulnerability in Wolfssl
wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations.
network
low complexity
wolfssl CWE-330
6.4
2022-01-01 CVE-2021-45932 Out-of-bounds Write vulnerability in Wolfssl Wolfmqtt 1.9
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket).
network
wolfssl CWE-787
4.3
2022-01-01 CVE-2021-45933 Out-of-bounds Write vulnerability in Wolfssl Wolfmqtt 1.9
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket).
network
wolfssl CWE-787
4.3
2022-01-01 CVE-2021-45934 Out-of-bounds Write vulnerability in Wolfssl Wolfmqtt 1.9
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket and MqttClient_WaitType).
network
wolfssl CWE-787
4.3
2022-01-01 CVE-2021-45936 Out-of-bounds Write vulnerability in Wolfssl Wolfmqtt 1.9
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType).
network
wolfssl CWE-787
4.3