Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv3

CVE-2015-6925

Published: 22/01/2016 Updated: 25/01/2016
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 446
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Wolfssl

Vulnerability Summary

wolfSSL (formerly CyaSSL) prior to 3.6.8 allows remote malicious users to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.

Vulnerable Product Search on Vulmon Subscribe to Product

wolfssl wolfssl

Vendor Advisories

Debian CVElist Bug Report Logs: wolfssl: CVE-2015-6925: DoS and DoS amplification
Debian Bug report logs - #801120 wolfssl: CVE-2015-6925: DoS and DoS amplification Package: src:wolfssl; Maintainer for src:wolfssl is Felix Lechner <felixlechner@lease-upcom>; Reported by: Sebastian Ramacher <sebastianramacher@iaiktugrazat> Date: Tue, 6 Oct 2015 14:03:07 UTC Severity: important Tags: fixed-ups ...

Github Repositories

https://github.com/IAIK/wolfSSL-DoS

Proof of concept for denial of service attack on wolfSSL's DTLS server implementation.

CVE-2015-6925 [1, 2]: DoS attack on wolfSSL DTLS server and DoS amplification DTLS 12 [5] includes an optional extra round trip based on a cookie in the handshake phase to prevent the following two attack scenarios: DoS of the DTLS server caused by forcing the server to allocate an extensive amount of resources or by performing expensive computations, and amplifying a DoS

https://github.com/MrE-Fog/wolfSSL-DoS

CVE-2015-6925 [1, 2]: DoS attack on wolfSSL DTLS server and DoS amplification DTLS 12 [5] includes an optional extra round trip based on a cookie in the handshake phase to prevent the following two attack scenarios: DoS of the DTLS server caused by forcing the server to allocate an extensive amount of resources or by performing expensive computations, and amplifying a DoS

https://github.com/MrE-Fog/wolfSSL-DoS3

CVE-2015-6925 [1, 2]: DoS attack on wolfSSL DTLS server and DoS amplification DTLS 12 [5] includes an optional extra round trip based on a cookie in the handshake phase to prevent the following two attack scenarios: DoS of the DTLS server caused by forcing the server to allocate an extensive amount of resources or by performing expensive computations, and amplifying a DoS

References

CWE-399https://github.com/IAIK/wolfSSL-DoShttps://wolfssl.com/wolfSSL/Blog/Entries/2015/9/17_Two_Vulnerabilities_Recently_Found%2C_An_Attack_on_RSA_using_CRT_and_DoS_Vulnerability_With_DTLS.htmlhttp://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.htmlhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=801120https://nvd.nist.govhttps://github.com/IAIK/wolfSSL-DoS
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook