5

CVE-2014-2899

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when a certificate parsing failure occurs or (2) a client_key_exchange message when the ephemeral key is not found.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Yassl ≫ Cyassl Version <= 2.9.0
Yassl ≫ Cyassl Version0.2.0
Yassl ≫ Cyassl Version0.3.0
Yassl ≫ Cyassl Version0.4.0
Yassl ≫ Cyassl Version0.5.0
Yassl ≫ Cyassl Version0.5.5
Yassl ≫ Cyassl Version0.6.0
Yassl ≫ Cyassl Version0.6.2
Yassl ≫ Cyassl Version0.6.3
Yassl ≫ Cyassl Version0.8.0
Yassl ≫ Cyassl Version0.9.0
Yassl ≫ Cyassl Version0.9.6
Yassl ≫ Cyassl Version0.9.8
Yassl ≫ Cyassl Version0.9.9
Yassl ≫ Cyassl Version1.0.0 Updaterc1
Yassl ≫ Cyassl Version1.0.0 Updaterc2
Yassl ≫ Cyassl Version1.0.0 Updaterc3
Yassl ≫ Cyassl Version1.0.2
Yassl ≫ Cyassl Version1.0.3
Yassl ≫ Cyassl Version1.0.6
Yassl ≫ Cyassl Version1.1.0
Yassl ≫ Cyassl Version1.2.0
Yassl ≫ Cyassl Version1.3.0
Yassl ≫ Cyassl Version1.4.0
Yassl ≫ Cyassl Version1.5.0
Yassl ≫ Cyassl Version1.5.4
Yassl ≫ Cyassl Version1.5.6
Yassl ≫ Cyassl Version1.6.0
Yassl ≫ Cyassl Version1.6.5
Yassl ≫ Cyassl Version1.8.0
Yassl ≫ Cyassl Version1.9.0
Yassl ≫ Cyassl Version2.0.0 Updaterc1
Yassl ≫ Cyassl Version2.0.0 Updaterc2
Yassl ≫ Cyassl Version2.0.0 Updaterc3
Yassl ≫ Cyassl Version2.0.2
Yassl ≫ Cyassl Version2.0.6
Yassl ≫ Cyassl Version2.0.8
Yassl ≫ Cyassl Version2.2.0
Yassl ≫ Cyassl Version2.3.0
Yassl ≫ Cyassl Version2.4.0
Yassl ≫ Cyassl Version2.4.6
Yassl ≫ Cyassl Version2.5.0
Yassl ≫ Cyassl Version2.6.0
Yassl ≫ Cyassl Version2.7.0
Yassl ≫ Cyassl Version2.8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.88% 0.745
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.