CVE-2017-8855

wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-05-09

Last modified

2024-09-16

Affected products

• Wolfssl (Wolfssl)

References

• https://github.com/wolfSSL/wolfssl/releases/tag/v3.11.0-stable