wolfSSL up to 5.7.0 TLS downgrade

Summaryinfo

A vulnerability marked as problematic has been reported in wolfSSL up to 5.7.0. This affects an unknown function of the component TLS Handler. This manipulation causes downgrade. This vulnerability is registered as CVE-2024-5814. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in wolfSSL up to 5.7.0. It has been declared as problematic. Affected by this vulnerability is an unknown code of the component TLS Handler. The manipulation with an unknown input leads to a downgrade vulnerability. The CWE definition for the vulnerability is CWE-757. A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. As an impact it is known to affect confidentiality. The summary by CVE is:

A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from the extensions, the client was skipping fully parsing the server hello. https://doi.org/10.46586/tches.v2024.i1.457-500

The weakness was published by Armin Najafabadi. The advisory is shared at github.com. This vulnerability is known as CVE-2024-5814 since 06/10/2024. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1562.010 for this issue.

The vulnerability scanner Nessus provides a plugin with the ID 212845 (CBL Mariner 2.0 Security Update: mariadb (CVE-2024-5814)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (212845) and EUVD (EUVD-2024-46962). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• wolfSSL

Version

• 5.0
• 5.1
• 5.2
• 5.3
• 5.4
• 5.5
• 5.6
• 5.7.0

License

• open-source

Website

• Product: https://github.com/wolfSSL/wolfssl/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion