CVE-2014-2898

概要

参考情報

• seclists.org/oss-sec/2014/q2/126 · Mailing List
• seclists.org/oss-sec/2014/q2/130 · Mailing List
• wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.html · Vendor Advisory
• wolfssl.com/yaSSL/Docs-cyassl-changelog.html · Vendor Advisory

wolfssl のその他の脆弱性

• CVE-2026-94417中 5.3When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for…
• CVE-2026-93304低 3.7A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its ClientKeyExchange. No master secret has been derived at tha…
• CVE-2026-93302高 8.2MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macr…
• CVE-2026-89135中 6.5A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in e…
• CVE-2026-89134緊急 9.1A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constra…