CY
Product
Cyassl
4
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Cyassl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-2899 | – | Apr 22 | wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when a certificate parsing… Affected: through 2.9.0; 0.2.0; 0.3.0; 0.4.0; 0.5.0; 0.5.5; +34 more |
| CVE-2014-2900 | – | Apr 22 | wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted… Affected: through 2.9.0; 0.2.0; 0.3.0; 0.4.0; 0.5.0; 0.5.5; +34 more |
| CVE-2013-1623 | – | Feb 8 | The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of… Affected: through 2.4.6; 0.2.0; 0.3.0; 0.4.0; 0.5.0; 0.5.5; +34 more |
| CVE-2012-1558 | – | Mar 12 | yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate Affected: through 2.0.6; 0.2.0; 0.3.0; 0.4.0; 0.5.0; 0.5.5; +29 more |
Showing 4