Beveiligingsadvies

CVE-2025-11933

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-21 22:19:08
Laatst bijgewerkt 2025-12-08 15:47:25
Toegewezen door wolfSSL
CVSS-score 2.3
Status PUBLISHED

Beschrijving

Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions.