Unscored CVE-2020-24585 EUVD-2020-17302GHSA-5vqc-37wg-fvq8

An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do no…

Published Aug 21, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: wolfssl Package: wolfssl Ecosystem: Debian Ecosystem: Ubuntu

Description

An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 13	wolfssl	4.5.0+dfsg-1	—
Debian 12	wolfssl	4.5.0+dfsg-1	—

Ubuntu