Summary
Successful exploitation of these vulnerabilities could allow remote code execution.
Vulnerabilities 2
-
Unscored —
In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while ha…
-
Unscored —
RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between …
Revision history
-
#1
CSAF Creation Date
References
-
ICS Advisory ICSA-23-131-14 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-14
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://us-cert.cisa.gov/ics/Recommended-Practices
-
Recommended Practices
https://cisa.gov/ics