5.8

CVE-2014-2900

wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X.509 certificate.

Data is provided by the National Vulnerability Database (NVD)
Yassl ≫ Cyassl Version <= 2.9.0
Yassl ≫ Cyassl Version0.2.0
Yassl ≫ Cyassl Version0.3.0
Yassl ≫ Cyassl Version0.4.0
Yassl ≫ Cyassl Version0.5.0
Yassl ≫ Cyassl Version0.5.5
Yassl ≫ Cyassl Version0.6.0
Yassl ≫ Cyassl Version0.6.2
Yassl ≫ Cyassl Version0.6.3
Yassl ≫ Cyassl Version0.8.0
Yassl ≫ Cyassl Version0.9.0
Yassl ≫ Cyassl Version0.9.6
Yassl ≫ Cyassl Version0.9.8
Yassl ≫ Cyassl Version0.9.9
Yassl ≫ Cyassl Version1.0.0 Updaterc1
Yassl ≫ Cyassl Version1.0.0 Updaterc2
Yassl ≫ Cyassl Version1.0.0 Updaterc3
Yassl ≫ Cyassl Version1.0.2
Yassl ≫ Cyassl Version1.0.3
Yassl ≫ Cyassl Version1.0.6
Yassl ≫ Cyassl Version1.1.0
Yassl ≫ Cyassl Version1.2.0
Yassl ≫ Cyassl Version1.3.0
Yassl ≫ Cyassl Version1.4.0
Yassl ≫ Cyassl Version1.5.0
Yassl ≫ Cyassl Version1.5.4
Yassl ≫ Cyassl Version1.5.6
Yassl ≫ Cyassl Version1.6.0
Yassl ≫ Cyassl Version1.6.5
Yassl ≫ Cyassl Version1.8.0
Yassl ≫ Cyassl Version1.9.0
Yassl ≫ Cyassl Version2.0.0 Updaterc1
Yassl ≫ Cyassl Version2.0.0 Updaterc2
Yassl ≫ Cyassl Version2.0.0 Updaterc3
Yassl ≫ Cyassl Version2.0.2
Yassl ≫ Cyassl Version2.0.6
Yassl ≫ Cyassl Version2.0.8
Yassl ≫ Cyassl Version2.2.0
Yassl ≫ Cyassl Version2.3.0
Yassl ≫ Cyassl Version2.4.0
Yassl ≫ Cyassl Version2.4.6
Yassl ≫ Cyassl Version2.5.0
Yassl ≫ Cyassl Version2.6.0
Yassl ≫ Cyassl Version2.7.0
Yassl ≫ Cyassl Version2.8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.29% 0.517
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N