[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6TUx5hLwZiyK_GbAhCkaTV9mNs_eKTHIjNsPdx_2LgQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":93,"topProductsByCves":94,"seoMetadata":99,"meta":108},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":35},35163,"wolfssl",4,66,0,195,"2024-08-30","w",[16,20,26,31],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},171858,114,58,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},171857,"wolfmqtt",23,7,"2022-01-01",{"id":27,"product_name":28,"version_count":19,"cve_count":29,"kev_count":11,"last_cve_update":30},171859,"yassl",1,"2009-12-30",{"id":32,"product_name":33,"version_count":11,"cve_count":11,"kev_count":11,"last_cve_update":34},171856,"wolfcrypt",null,"Wolfssl is a technology vendor with 4 tracked products and 66 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[37,45,51,59,64,69,76,81,85,90],{"cveId":38,"description":39,"publishedDate":30,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":44},"CVE-2009-4484","Multiple stack-based buffer overflows in the CertDecoder::GetName function in src\u002Fasn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.",7.5,"v2","High",false,0.69552,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":40,"cvssVersion":49,"severity":42,"isKev":43,"epssScore":50},"CVE-2017-13099","wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as \"ROBOT.\"","2017-12-13","v3.0",0.27383,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":43,"epssScore":58},"CVE-2019-11873","wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a crafted hello client packet over the network to a TLSv1.3 wolfSSL server. The length fields of the packet: record length, client hello length, total extensions length, PSK extension length, total identity length, and identity length contain their maximum value which is 2^16. The identity data field of the PSK extension of the packet contains the attack data, to be stored in the undefined memory (RAM) of the server. The size of the data is about 65 kB. Possibly the attacker can perform a remote code execution attack.","2019-05-23",9.8,"v3.1","Critical",0.09249,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":43,"epssScore":63},"CVE-2017-2800","A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution. In order to trigger this vulnerability, the attacker needs to supply a malicious x509 certificate to either a server or a client application using this library.","2017-05-24",0.0853,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":40,"cvssVersion":56,"severity":42,"isKev":43,"epssScore":68},"CVE-2022-39173","In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message.","2022-09-29",0.05763,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":56,"severity":74,"isKev":43,"epssScore":75},"CVE-2015-7744","wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.","2016-01-22",5.9,"Medium",0.05031,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":43,"epssScore":80},"CVE-2020-36177","RsaPad_PSS in wolfcrypt\u002Fsrc\u002Frsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.","2021-01-06",0.03567,{"cveId":82,"description":83,"publishedDate":72,"cvssScore":40,"cvssVersion":49,"severity":42,"isKev":43,"epssScore":84},"CVE-2015-6925","wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.",0.03046,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":43,"epssScore":89},"CVE-2014-2897","The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows remote attackers to have unspecified impact via a crafted HMAC, which triggers an out-of-bounds read.","2020-01-28",0.0277,{"cveId":91,"description":92,"publishedDate":88,"cvssScore":55,"cvssVersion":56,"severity":57,"isKev":43,"epssScore":89},"CVE-2014-2898","wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verification failure.",[],[95,96,97,98],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":19,"cve_count":29,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":11,"cve_count":11,"kev_count":11,"last_cve_update":34},{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Wolfssl - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Wolfssl covering 4 products with 66 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Wolfssl vulnerabilities, Wolfssl security, Wolfssl CVE, Wolfssl threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":104,"@type":105,"name":106,"description":101,"url":107},"https:\u002F\u002Fschema.org","Organization","Wolfssl","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fwolfssl",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":109,"apiVersion":110},"2026-10-17T10:26:46.934Z","3.0"]