PT-2022-6103 · Wolfssl+1 · Wolfssl+1

Lucca Hirschi + 2 · Published 2022-10-29 · Updated 2023-02-15 · CVE-2022-42905

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 5.5.2

Description The issue is related to a buffer over-read vulnerability in the wolfSSL library. This can be triggered by a malicious TLS 1.3 client or network attacker when callback functions are enabled via the WOLFSSL CALLBACKS flag. The exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information or cause a denial of service.

Recommendations For versions prior to 5.5.2, consider disabling the WOLFSSL CALLBACKS flag as a temporary workaround to minimize the risk of exploitation, as this flag is only intended for debugging purposes. Update to version 5.5.2 or later to fully resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2022-2955

ALT-PU-2023-1034

BDU:2023-00042

CVE-2022-42905

Affected Products

Alt Linux

Wolfssl

References · 19

• https://bdu.fstec.ru/vul/2023-00042 · Security Note
• https://ubuntu.com/security/CVE-2022-42905 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-42905 · Security Note
• https://wolfssl.com/docs/security-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-42905 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-42905 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-42905 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42905 · Security Note
• https://osv.dev/vulnerability/CVE-2022-42905 · Vendor Advisory
• https://github.com/wolfSSL/wolfssl/releases · Note
• https://github.com/wolfSSL/wolfssl/releases/tag/v5.5.2-stable · Note
• http://packetstormsecurity.com/files/170610/wolfSSL-WOLFSSL_CALLBACKS-Heap-Buffer-Over-Read.html · Note
• https://t.me/cvenotify/43958 · Telegram Post
• http://seclists.org/fulldisclosure/2023/Jan/11 · Note
• https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh · Note