Wolfssh

Wolfssh

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2024-2873

  • EPSS 0.2%
  • Published 25.03.2024 22:37:19
  • Last modified 21.11.2024 09:10:43

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access.

9.8

CVE-2022-32073

  • EPSS 1.35%
  • Published 13.07.2022 16:15:08
  • Last modified 21.11.2024 07:05:44

WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR.