CVE-2022-25638
published 2022-02-24CVE-2022-25638: In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the…
PriorityP429medium6.5CVSS 3.1
AVNACLPRNUIRSUCNIHAN
EPSS
0.63%
46.1th percentile
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sig_algo field differs between the certificate_verify message and the certificate message.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wolfssl | < wolfssl 5.2.0-1 (bookworm) | wolfssl 5.2.0-1 (bookworm) |
| wolfssl | wolfssl | < 5.2.0 | 5.2.0 |
| wolfssl | wolfssl | >= 0 < 4.6.0+p1-0+deb11u1 | 4.6.0+p1-0+deb11u1 |
| wolfssl | wolfssl | >= 0 < 5.2.0-1 | 5.2.0-1 |
| wolfssl | wolfssl | >= 0 < 5.2.0-1 | 5.2.0-1 |
| wolfssl | wolfssl | >= 0 < 5.2.0-1 | 5.2.0-1 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv6.5MEDIUM
vendor_oracle7.4HIGH
vendor_debian6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
ImageMagick has memory leak in msl encoder
ghsa·2026-02-24
CVE-2026-25638 [MEDIUM] CWE-401 ImageMagick has memory leak in msl encoder
ImageMagick has memory leak in msl encoder
Memory leak exists in `coders/msl.c`. In the `WriteMSLImage` function of the `msl.c` file, resources are allocated. But the function returns early without releasing these allocated resources.
```
==78983== Memcheck, a memory error detector
==78983== Copyright (C) 2002-2022, and GNU GPL'd, by Julian Seward et al.
==78983== Using Valgrind-3.22.0 and LibVEX; rerun with -h for copyright info
==78983==
==78983== 177,196 (13,512 direct, 163,684 indirect) bytes in 1 blocks are definitely lost in loss record 21 of 21
==78983== at 0x4846828: malloc (in /usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so)
```
GHSA
GHSA-xxrj-j9r7-g9q6: In wolfSSL before 5
ghsa_unreviewed·2022-02-25
CVE-2022-25638 [MEDIUM] CWE-295 GHSA-xxrj-j9r7-g9q6: In wolfSSL before 5
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sig_algo field differs between the certificate_verify message and the certificate message.
OSV
CVE-2022-25638: In wolfSSL before 5
osv·2022-02-24·CVSS 6.5
CVE-2022-25638 [MEDIUM] CVE-2022-25638: In wolfSSL before 5
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sig_algo field differs between the certificate_verify message and the certificate message.
Oracle
Oracle Oracle Communications Risk Matrix: CNC Console (hibernate-core) — CVE-2020-25638
vendor_oracle·2022-04-15·CVSS 7.4
CVE-2020-25638 [HIGH] Oracle Oracle Communications Risk Matrix: CNC Console (hibernate-core) — CVE-2020-25638
Oracle Oracle Communications Risk Matrix: CNC Console (hibernate-core) vulnerability
CVE: CVE-2020-25638
CVSS: 7.4
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2022 (APR 2022)
Debian
CVE-2022-25638: wolfssl - In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted...
vendor_debian·2022·CVSS 6.5
CVE-2022-25638 [MEDIUM] CVE-2022-25638: wolfssl - In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted...
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sig_algo field differs between the certificate_verify message and the certificate message.
Scope: local
bookworm: resolved (fixed in 5.2.0-1)
bullseye: resolved (fixed in 4.6.0+p1-0+deb11u1)
forky: resolved (fixed in 5.2.0-1)
sid: resolved (fixed in 5.2.0-1)
trixie: resolved (fixed in 5.2.0-1)
No detection rules found.
No public exploits indexed.
Trailofbits
Keeping the wolves out of wolfSSL
blogs_trailofbits·2023-01-12·CVSS 6.5
CVE-2022-38152 [MEDIUM] Keeping the wolves out of wolfSSL
Trail of Bits is publicly disclosing four vulnerabilities that affect wolfSSL: CVE-2022-38152, CVE-2022-38153, CVE-2022-39173, and CVE-2022-42905. The four issues, which have CVSS scores ranging from medium to critical, can all result in a denial of service (DoS). These vulnerabilities have been discovered automatically using the novel protocol fuzzer tlspuffin. This blog post will explore these vulnerabilities, then provide an in-depth overview of the fuzzer.
tlspuffin is a fuzzer inspired by formal protocol verification. Initially developed as part of my internship at LORIA, INRIA, France, it is especially targeted against cryptographic protocols like TLS or SSH.
During my internship at Trail of Bits, we pushed protocol fuzzing even further by supporting a new protocol (SSH), adding mo
Trailofbits
Keeping the wolves out of wolfSSL
blogs_trailofbits·2023-01-12·CVSS 6.5
CVE-2022-38152 [MEDIUM] Keeping the wolves out of wolfSSL
Trail of Bits is publicly disclosing four vulnerabilities that affect wolfSSL: CVE-2022-38152 , CVE-2022-38153 , CVE-2022-39173 , and CVE-2022-42905 . The four issues, which have CVSS scores ranging from medium to critical, can all result in a denial of service (DoS). These vulnerabilities have been discovered automatically using the novel protocol fuzzer tlspuffin . This blog post will explore these vulnerabilities, then provide an in-depth overview of the fuzzer.
tlspuffin is a fuzzer inspired by formal protocol verification. Initially developed as part of my internship at LORIA, INRIA, France , it is especially targeted against cryptographic protocols like TLS or SSH.
During my internship at Trail of Bits, we pushed protocol fuzzing even further by supporting a new protocol (SSH), add
2022-02-24
Published