CVE-2022-23408 in wolfSSLinformación

Resumen

por MITRE • 2022-01-19

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in BuildMessage in internal.c.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

2022-01-18

Divulgación

2022-01-19

Moderación

aceptado

Artículo

VDB-191231

CPE

listo

EPSS

0.01417

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-23408
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-23408
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-23408/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!