Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

yassl yassl 0.9.9 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2005-3731
Unspecified vulnerability in yaSSL prior to 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."
Yassl Yassl 0.9.5Yassl Yassl 0.9.6Yassl Yassl 0.9.8Yassl Yassl 0.9.9Yassl Yassl 0.3.5Yassl Yassl 0.4.0Yassl Yassl 0.5.0Yassl Yassl 0.6.0Yassl Yassl 1.0.5Yassl Yassl 0.3.0Yassl Yassl 0.7.0Yassl Yassl 0.9.0Yassl Yassl 1.0.1Yassl Yassl 1.0.3Yassl Yassl 0.8.0Yassl Yassl 0.9.2Yassl Yassl 1.0Yassl Yassl 1.0.2Yassl Yassl 1.0.4
5
CVSSv2
CVE-2012-1558
yaSSL CyaSSL prior to 2.0.8 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate.
Yassl Cyassl 2.0.0Yassl Cyassl 1.9.0Yassl Cyassl 1.4.0Yassl Cyassl 1.3.0Yassl Cyassl 1.8.0Yassl Cyassl 1.6.5Yassl Cyassl 1.2.0Yassl Cyassl 1.1.0Yassl Cyassl 0.9.9Yassl Cyassl 0.9.8Yassl Cyassl 0.5.0Yassl Cyassl 0.4.0Yassl Cyassl 2.0.2Yassl Cyassl 1.5.4Yassl Cyassl 1.5.0Yassl Cyassl 1.0.2Yassl Cyassl 1.0.0Yassl Cyassl 0.8.0Yassl Cyassl 0.6.3Yassl Cyassl 0.6.2Yassl CyasslYassl Cyassl 0.6.0
4.3
CVSSv2
CVE-2013-1623
The TLS and DTLS implementations in wolfSSL CyaSSL prior to 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote malicious users to conduct distinguishing attacks and p...
Yassl Cyassl 2.0.0Yassl Cyassl 1.6.0Yassl Cyassl 0.3.0Yassl Cyassl 0.8.0Yassl Cyassl 1.2.0Yassl Cyassl 1.0.3Yassl Cyassl 0.9.0Yassl Cyassl 0.9.6Yassl Cyassl 2.3.0Yassl Cyassl 2.4.0Yassl Cyassl 1.5.6Yassl Cyassl 1.8.0Yassl Cyassl 0.6.3Yassl Cyassl 0.6.2Yassl Cyassl 1.0.6Yassl Cyassl 1.5.0Yassl Cyassl 1.5.4Yassl Cyassl 1.0.0Yassl Cyassl 1.0.2Yassl CyasslYassl Cyassl 1.9.0Yassl Cyassl 0.5.0
5
CVSSv2
CVE-2014-2899
wolfSSL CyaSSL prior to 2.9.4 allows remote malicious users to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when a certificate parsing failure occurs or (2) a client_key_exchange message when the ephemeral key is not found.
Yassl Cyassl 0.4.0Yassl Cyassl 0.5.0Yassl Cyassl 0.9.6Yassl Cyassl 0.9.8Yassl Cyassl 0.9.9Yassl Cyassl 1.1.0Yassl Cyassl 1.2.0Yassl Cyassl 1.6.5Yassl Cyassl 1.8.0Yassl Cyassl 2.2.0Yassl Cyassl 2.3.0Yassl Cyassl 2.5.0Yassl Cyassl 0.5.5Yassl Cyassl 0.6.0Yassl Cyassl 1.0.0Yassl Cyassl 1.3.0Yassl Cyassl 1.4.0Yassl Cyassl 1.9.0Yassl Cyassl 2.0.0Yassl Cyassl 2.4.0Yassl Cyassl 2.4.6Yassl Cyassl 0.2.0
5.8
CVSSv2
CVE-2014-2900
wolfSSL CyaSSL prior to 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle malicious users to spoof servers via crafted X.509 certificate.
Yassl Cyassl 0.6.2Yassl Cyassl 0.6.3Yassl Cyassl 1.0.0Yassl Cyassl 1.0.2Yassl Cyassl 1.5.0Yassl Cyassl 1.5.4Yassl Cyassl 2.0.0Yassl CyasslYassl Cyassl 2.8.0Yassl Cyassl 0.4.0Yassl Cyassl 0.5.0Yassl Cyassl 0.9.6Yassl Cyassl 0.9.8Yassl Cyassl 0.9.9Yassl Cyassl 1.1.0Yassl Cyassl 1.2.0Yassl Cyassl 1.6.5Yassl Cyassl 1.8.0Yassl Cyassl 2.2.0Yassl Cyassl 2.3.0Yassl Cyassl 2.5.0Yassl Cyassl 0.5.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook