Beveiligingsadvies

CVE-2021-3336

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-01-29 04:58:39

Laatst bijgewerkt 2024-08-03 16:53:17

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or RSA signature without the corresponding certificate). The client side is affected because man-in-the-middle attackers can impersonate TLS 1.3 servers.

← Alle CVE's bekijken Bekijk op cve.org ↗