| Package | Affected versions | Patched versions |
|---|---|---|
| wolfssl | ≥ 5.8.2, < 5.8.4 | 5.8.4 |
Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted ClientHello message containing duplicate KeyShareEntry values for the same supported group, leading to excessive CPU and memory consumption during ClientHello processing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free