Vulnerabilidades em wolfSSL Inc.
12 resultadosAnálise Vexday
A wolfSSL Inc. apresenta 5 vulnerabilidades catalogadas, com 1 classificada como crítica, porém nenhuma sob ataque ativo confirmado. A fraqueza dominante (CWE-121 - stack-based buffer overflow) indica risco de execução de código remoto, embora o panorama seja estável com nenhuma divulgação recente nos últimos 90 dias.
CVE-2024-2873CRITICALUser authentication bypass in wolfSSH serverEPSS 0.6%CVE-2026-84897MEDIUMwolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusionEPSS 0.5%CVE-2026-3849MEDIUMBuffer Overflow in HPKE via Oversized ECH ConfigEPSS 0.5%CVE-2026-83742MEDIUMwstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platformsEPSS 0.4%CVE-2024-5288MEDIUMSafe-error attack on TLS 1.3 ProtocolEPSS 0.4%CVE-2026-81020HIGHwolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordEPSS 0.4%CVE-2026-81019HIGHwolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordEPSS 0.4%CVE-2026-81341MEDIUMwolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 recordsEPSS 0.3%CVE-2026-81535MEDIUMwolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization checkEPSS 0.3%CVE-2026-16516CRITICALwolfSSH ECDSA host key curve not validated against negotiated algorithmEPSS 0.2%CVE-2025-7844LOWwolfTPM library wrapper function `wolfTPM2_RsaKey_TpmToWolf` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflowEPSS 0.2%CVE-2026-3503MEDIUMFault injection attack with ML-DSA and ML-KEM on ARMEPSS 0.2%