CVE-2021-44718

wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle (MITM) position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers.

Score

CVSS 3.1 5.9 Medium

Status

Modified - cve@mitre.org

Published

2022-09-02

Last modified

2024-08-04

Weaknesses

CWE-835

Affected products

• Wolfssl (Wolfssl)

References

• https://github.com/wolfSSL/wolfssl/releases
• https://www.wolfssl.com/docs/security-vulnerabilities/