QwikSec

Security Database

CVE

CWE

Training

CVE-2014-2899

Published: Apr 22, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when a certificate parsing failure occurs or (2) a client_key_exchange message when the ephemeral key is not found.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.html

x_refsource_CONFIRM

http://www.wolfssl.com/yaSSL/Docs-cyassl-changelog.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_GENTOO

[oss-security] 20140417 CVE ids for CyaSSL 2.9.4?

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_BID

[oss-security] 20140418 Re: CVE ids for CyaSSL 2.9.4?

mailing-list

x_refsource_MLIST

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.