Yassl

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Yassl records in CISA KEV

No Yassl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cyassl 4 records LOW Yassl 3 records HIGH Yasslews 1 record MEDIUM

Records

4 records in Cyassl · all components

TI-2014-02330 CVE-2014-2900 · GHSA-rjjg-j224-h375

wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown…

LOW 28

wolfSSL CyaSSL before 2.9.4 does not properly validate X.509 certificates with unknown critical extensions, which allows man-in-the-middle attackers to spoof servers via crafted X.509 certificate.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00962 Published 2014-04-22 No fix listed CWE-310

TI-2014-02329 CVE-2014-2899 · GHSA-qc4v-fv24-r267

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL…

LOW 26

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when a certificate parsing failure occurs or (2) a client_key_exchang…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01816 Published 2014-04-22 No fix listed CWE-20

TI-2012-01352 CVE-2012-1558 · GHSA-cxcp-gx6w-9hj9

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL…

LOW 26

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted X.509 certificate.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01352 Published 2012-03-12 No fix listed CWE-399

TI-2013-01429 CVE-2013-1623 · GHSA-5g8p-qpcj-85w5

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider…

LOW 25

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remo…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02424 Published 2013-02-08 No fix listed CWE-310

Open these records in search →

Critical	1
High	3
Medium	4
Low	0
No CVSS	0