Memory Corruption and Out-of-Bounds Read Vulnerability in wolfSSL CyaSSL

CVE-2014-2896 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an out-of-bounds read.

Learn more about our Web Application Penetration Testing UK.