5.8

CVE-2014-2900

wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X.509 certificate.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Yassl ≫ Cyassl Version <= 2.9.0
Yassl ≫ Cyassl Version0.2.0
Yassl ≫ Cyassl Version0.3.0
Yassl ≫ Cyassl Version0.4.0
Yassl ≫ Cyassl Version0.5.0
Yassl ≫ Cyassl Version0.5.5
Yassl ≫ Cyassl Version0.6.0
Yassl ≫ Cyassl Version0.6.2
Yassl ≫ Cyassl Version0.6.3
Yassl ≫ Cyassl Version0.8.0
Yassl ≫ Cyassl Version0.9.0
Yassl ≫ Cyassl Version0.9.6
Yassl ≫ Cyassl Version0.9.8
Yassl ≫ Cyassl Version0.9.9
Yassl ≫ Cyassl Version1.0.0 Updaterc1
Yassl ≫ Cyassl Version1.0.0 Updaterc2
Yassl ≫ Cyassl Version1.0.0 Updaterc3
Yassl ≫ Cyassl Version1.0.2
Yassl ≫ Cyassl Version1.0.3
Yassl ≫ Cyassl Version1.0.6
Yassl ≫ Cyassl Version1.1.0
Yassl ≫ Cyassl Version1.2.0
Yassl ≫ Cyassl Version1.3.0
Yassl ≫ Cyassl Version1.4.0
Yassl ≫ Cyassl Version1.5.0
Yassl ≫ Cyassl Version1.5.4
Yassl ≫ Cyassl Version1.5.6
Yassl ≫ Cyassl Version1.6.0
Yassl ≫ Cyassl Version1.6.5
Yassl ≫ Cyassl Version1.8.0
Yassl ≫ Cyassl Version1.9.0
Yassl ≫ Cyassl Version2.0.0 Updaterc1
Yassl ≫ Cyassl Version2.0.0 Updaterc2
Yassl ≫ Cyassl Version2.0.0 Updaterc3
Yassl ≫ Cyassl Version2.0.2
Yassl ≫ Cyassl Version2.0.6
Yassl ≫ Cyassl Version2.0.8
Yassl ≫ Cyassl Version2.2.0
Yassl ≫ Cyassl Version2.3.0
Yassl ≫ Cyassl Version2.4.0
Yassl ≫ Cyassl Version2.4.6
Yassl ≫ Cyassl Version2.5.0
Yassl ≫ Cyassl Version2.6.0
Yassl ≫ Cyassl Version2.7.0
Yassl ≫ Cyassl Version2.8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.97% 0.574
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://seclists.org/oss-sec/2014/q2/126
http://seclists.org/oss-sec/2014/q2/130
http://secunia.com/advisories/57743
Vendor Advisory
http://www.securityfocus.com/bid/66780
http://www.wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.html
Vendor Advisory
http://www.wolfssl.com/yaSSL/Docs-cyassl-changelog.html
https://security.gentoo.org/glsa/201612-53