CVE-2015-6925 — Wolfssl vulnerability

CWE-3994 documents4 sources

Severity

7.5HIGHNVD

EPSS

0.9%

top 24.37%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wolfssl Debian Wolfssl

Timeline

PublishedJan 22

Latest updateMay 17

Description

wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶debiandebian/wolfssl< wolfssl 3.9.10+dfsg-1 (bookworm)

▶Debianwolfssl/wolfssl< 3.9.10+dfsg-1+3

▶NVDwolfssl/wolfssl3.6.6

🔴Vulnerability Details

GHSA

GHSA-m9j2-cgfg-36p9: wolfSSL (formerly CyaSSL) before 3↗2022-05-17

▶

OSV

CVE-2015-6925: wolfSSL (formerly CyaSSL) before 3↗2016-01-22

▶

📋Vendor Advisories

Debian

CVE-2015-6925: wolfssl - wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial...↗2015

▶