Wind River Support Network

HomeDefectsLIN9-4212
Acknowledged

LIN9-4212 : Security Advisory - wolfssl - CVE-2017-8854

Created: May 14, 2017    Updated: May 29, 2018
Found In Version: 9.0.0.6
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed temporary DH file.

https://nvd.nist.gov/vuln/detail/CVE-2017-8854

CVEs


Live chat
Online