Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.
Debian Bug report logs -
#1067799
wolfssl: CVE-2024-0901
Package:
src:wolfssl;
Maintainer for src:wolfssl is Jacob Barthelmeh <sirkilamole@msncom>;
Reported by: Salvatore Bonaccorso <carnil@debianorg>
Date: Tue, 26 Mar 2024 21:54:13 UTC
Severity: important
Tags: security, upstream
Found in version wolfssl/566-1 ...
wolfSSL Embedded SSL/TLS Library
The wolfSSL embedded SSL library
(formerly CyaSSL) is a lightweight SSL/TLS library written in ANSI C and
targeted for embedded, RTOS, and resource-constrained environments - primarily
because of its small size, speed, and feature set It is commonly used in
standard operating environments as well because of its royalty-free pricing
and excelle
Vulmon