1. Forum
  2. FidoNet
  3. SECURITY

  • wolfSSL WOLFSSL_CALLBACKS Heap Buffer Over-Read

    From Security Bot@2:250/1 to All on Thu May 25 04:22:00 2023


    wolfSSL WOLFSSL_CALLBACKS Heap Buffer Over-Read

    wolfSSL versions prior to 5.5.2 suffer from a heap buffer over-read with WOLFSSL_CALLBACKS and can be triggered with a single Client Hello message.

    https://packetstormsecurity.com/files/170610/wolfssl-overread.txt

    Fri, 20 Jan 2023 15:40:01 GMT
    ________________________________
    --- The information is for inforamtional purposes only.
    * Origin: Read us with http://winpoint.org JID: rs@captflint.com