Vendor/product archive

yassl / cyassl CVEs

Beta · best-effort

4 CVEs tagged to yassl / cyassl — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to yassl vendor archive

CVE-2014-2899

Published Apr 22, 2014

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when a certificate parsing f…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-2900

Published Apr 22, 2014

wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X…

CVSS 5.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-1623

Published Feb 8, 2013

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2012-1558

Published Mar 12, 2012

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1