CVE-2024-0901

Summary

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.

Affected Software

Weaknesses

• CWE-129: CWE-129 Improper Validation of Array Index

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/wolfSSL/wolfssl/issues/7089
• https://github.com/wolfSSL/wolfssl/pull/7099

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/wolfSSL/wolfssl/issues/7089
• https://github.com/wolfSSL/wolfssl/pull/7099

• ←Previous
• Next→