Skip to content
OpenAdvisories
Unscored CVE-2014-2898 EUVD-2014-2921GHSA-p2w9-2vv2-hrmq

wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which trigger…

Published Jan 28, 2020 · Updated Aug 6, 2024 · Assigned by mitre

Description

wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verification failure.

References