Wind River Support Network

HomeDefectsLIN8-6693
Acknowledged

LIN8-6693 : Security Advisory - wolfssl - CVE-2017-8854

Created: May 14, 2017    Updated: May 29, 2018
Found In Version: 8.0.0.17
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed temporary DH file.

https://nvd.nist.gov/vuln/detail/CVE-2017-8854

CVEs


Live chat
Online