Beveiligingsadvies

CVE-2019-18840

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-11-09 12:58:52

Laatst bijgewerkt 2024-08-05 02:02:39

Toegewezen door mitre

CVSS-score 7.5

Status PUBLISHED

Beschrijving

In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the domain name location index is mishandled. Because a pointer is overwritten, there is an invalid free.

← Alle CVE's bekijken Bekijk op cve.org ↗