5

CVE-2014-2899

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when a certificate parsing failure occurs or (2) a client_key_exchange message when the ephemeral key is not found.

Data is provided by the National Vulnerability Database (NVD)
Yassl ≫ Cyassl Version <= 2.9.0
Yassl ≫ Cyassl Version0.2.0
Yassl ≫ Cyassl Version0.3.0
Yassl ≫ Cyassl Version0.4.0
Yassl ≫ Cyassl Version0.5.0
Yassl ≫ Cyassl Version0.5.5
Yassl ≫ Cyassl Version0.6.0
Yassl ≫ Cyassl Version0.6.2
Yassl ≫ Cyassl Version0.6.3
Yassl ≫ Cyassl Version0.8.0
Yassl ≫ Cyassl Version0.9.0
Yassl ≫ Cyassl Version0.9.6
Yassl ≫ Cyassl Version0.9.8
Yassl ≫ Cyassl Version0.9.9
Yassl ≫ Cyassl Version1.0.0 Updaterc1
Yassl ≫ Cyassl Version1.0.0 Updaterc2
Yassl ≫ Cyassl Version1.0.0 Updaterc3
Yassl ≫ Cyassl Version1.0.2
Yassl ≫ Cyassl Version1.0.3
Yassl ≫ Cyassl Version1.0.6
Yassl ≫ Cyassl Version1.1.0
Yassl ≫ Cyassl Version1.2.0
Yassl ≫ Cyassl Version1.3.0
Yassl ≫ Cyassl Version1.4.0
Yassl ≫ Cyassl Version1.5.0
Yassl ≫ Cyassl Version1.5.4
Yassl ≫ Cyassl Version1.5.6
Yassl ≫ Cyassl Version1.6.0
Yassl ≫ Cyassl Version1.6.5
Yassl ≫ Cyassl Version1.8.0
Yassl ≫ Cyassl Version1.9.0
Yassl ≫ Cyassl Version2.0.0 Updaterc1
Yassl ≫ Cyassl Version2.0.0 Updaterc2
Yassl ≫ Cyassl Version2.0.0 Updaterc3
Yassl ≫ Cyassl Version2.0.2
Yassl ≫ Cyassl Version2.0.6
Yassl ≫ Cyassl Version2.0.8
Yassl ≫ Cyassl Version2.2.0
Yassl ≫ Cyassl Version2.3.0
Yassl ≫ Cyassl Version2.4.0
Yassl ≫ Cyassl Version2.4.6
Yassl ≫ Cyassl Version2.5.0
Yassl ≫ Cyassl Version2.6.0
Yassl ≫ Cyassl Version2.7.0
Yassl ≫ Cyassl Version2.8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.88% 0.745
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.