CVE-2023-6936

Summary

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

Affected Software

Weaknesses

Workarounds

• Do not build wolfSSL with WOLFSSL_CALLBACKS defined

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• https://github.com/wolfSSL/wolfssl/pull/6949/
• https://www.wolfssl.com/docs/security-vulnerabilities/

References

• https://github.com/wolfSSL/wolfssl/pull/6949/
• https://www.wolfssl.com/docs/security-vulnerabilities/

• ←Previous
• Next→