CVE-2022-42905

published 2022-11-07

CVE-2022-42905: In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS 1.3 client or network attacker can trigger a…

Priority P3 48 critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I N A H

In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS 1.3 client or network attacker can trigger a buffer over-read on the heap of 5 bytes. (WOLFSSL_CALLBACKS is only intended for debugging.)

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	wolfssl	< wolfssl 5.5.3-1 (bookworm)	wolfssl 5.5.3-1 (bookworm)
wolfssl	wolfssl	< 5.5.2	5.5.2
wolfssl	wolfssl	>= 0 < 4.6.0+p1-0+deb11u2	4.6.0+p1-0+deb11u2
wolfssl	wolfssl	>= 0 < 5.5.3-1	5.5.3-1
wolfssl	wolfssl	>= 0 < 5.5.3-1	5.5.3-1
wolfssl	wolfssl	>= 0 < 5.5.3-1	5.5.3-1

CVSS provenance

nvd v3.1 9.1 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

osv 9.1 CRITICAL

vendor_debian 9.1 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-125