Wind River Support Network

HomeDefectsLIN8-6696

Acknowledged

LIN8-6696 : Security Advisory - wolfssl - CVE-2017-8855

Created: May 14, 2017 Updated: May 29, 2018

Found In Version: 8.0.0.17

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.

https://nvd.nist.gov/vuln/detail/CVE-2017-8855