Lucene search
Veracode Vulnerability DatabaseVERACODE:37987HistoryNov 12, 2022 - 11:21 a.m.
Buffer Over Read
2022-11-1211:21:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
wolfssl
buffer over-read
callback functions
heap
5 bytes
EPSS
0.003
Percentile
68.0%
wolfSSL is vulnerable to buffer overreads. The vulnerability exists if callback functions are enabled (via the WOLFSSL_CALLBACKS flag) which allows an attacker to trigger a buffer over-read on the heap of 5 bytes.
References
packetstormsecurity.com/files/170610/wolfSSL-WOLFSSL_CALLBACKS-Heap-Buffer-Over-Read.html
seclists.org/fulldisclosure/2023/Jan/11
blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/
github.com/wolfSSL/wolfssl/releases
github.com/wolfSSL/wolfssl/releases/tag/v5.5.2-stable
secdb.alpinelinux.org/edge/community.yaml
www.wolfssl.com/docs/security-vulnerabilities/
Related
alpinelinux
alpinelinux
CVE-2022-42905
2022-11-07 00:15:09
zdt
zdt
wolfSSL 5.5.2 WOLFSSL_CALLBACKS Heap Buffer Over-Read Vulnerability
2023-01-22 00:00:00
ubuntucve
ubuntucve
CVE-2022-42905
2022-11-07 00:00:00
osv
osv
CVE-2022-42905
2022-11-07 00:15:09
debiancve
debiancve
CVE-2022-42905
2022-11-07 00:15:09
prion
prion
Heap overflow
2022-11-07 00:15:00
cvelist
cvelist
CVE-2022-42905
2022-11-06 00:00:00
cve
cve
CVE-2022-42905
2022-11-07 00:15:09
packetstorm
packetstorm
wolfSSL WOLFSSL_CALLBACKS Heap Buffer Over-Read
2023-01-20 00:00:00
nvd
nvd
CVE-2022-42905
2022-11-07 00:15:09