Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-38120 State: PUBLISHED Published: 2022-11-10T02:20:41.230Z Last Updated: 2025-05-01T19:08:42.468Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: POWERCOM CO., LTD. Products: UPSMON PRO Problem Types: CWE-22 Description: UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6679-a0695-1.html
CVE ID: CVE-2022-38121 State: PUBLISHED Published: 2022-11-10T02:20:42.270Z Last Updated: 2025-05-01T19:07:59.479Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: POWERCOM CO., LTD. Products: UPSMON PRO Problem Types: CWE-522 Description: UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users‘ and administrators' account names and passwords via this unprotected configuration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6680-af0aa-1.html
CVE ID: CVE-2022-38122 State: PUBLISHED Published: 2022-11-10T02:20:43.297Z Last Updated: 2025-05-01T19:07:13.585Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: POWERCOM CO., LTD. Products: UPSMON PRO Problem Types: CWE-319 Description: UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-6681-e9650-1.html
CVE ID: CVE-2022-38123 State: PUBLISHED Published: 2022-12-06T15:58:01.365Z Last Updated: 2025-04-23T16:12:37.744Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H) Vendors: Secomea Products: GateManager Problem Types: CWE-20 Description: Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface. This issue affects: Secomea GateManager versions prior to 10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-38124 State: PUBLISHED Published: 2022-12-13T13:06:17.021Z Last Updated: 2025-04-18T15:28:20.215Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Secomea Products: SiteManager Problem Types: CWE-267 Description: Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-38125 State: PUBLISHED Published: 2023-04-19T11:58:14.508Z Last Updated: 2025-02-05T15:00:42.143Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Secomea Products: SiteManager Problem Types: CWE-923 Description: Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2022-38126 State: REJECTED Published: 2022-09-01T19:46:59.288Z Last Updated: 2025-02-13T15:46:30.204Z Description: No description available.
CVE ID: CVE-2022-38127 State: REJECTED Published: 2022-09-01T19:47:22.567Z Last Updated: 2025-02-13T15:46:31.020Z Description: No description available.
CVE ID: CVE-2022-38128 State: REJECTED Published: 2022-09-01T19:47:18.043Z Last Updated: 2025-02-13T15:46:31.502Z Description: No description available.
CVE ID: CVE-2022-38129 State: PUBLISHED Published: 2022-08-10T16:04:27.000Z Last Updated: 2025-08-27T18:48:52.261Z Vendors: n/a Products: Keysight Technologies Sensor Management Server Problem Types: Arbitrary Code Execution Description: A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2022-28
CVE ID: CVE-2022-38130 State: PUBLISHED Published: 2022-08-10T16:05:39 Last Updated: 2024-08-03T10:45:52.432Z Vendors: n/a Products: Keysight Technologies Sensor Management Server Problem Types: Arbitrary Code Execution Description: The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\<attacker-host>\sms\<attacker-db.zip>), effectively controlling the content of the database to be restored. Additional Analyst Notes: - CVE Program Container: References: -
ontrolling the content of the database to be restored. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2022-28
CVE ID: CVE-2022-38131 State: PUBLISHED Published: 2022-09-06T00:00:00 Last Updated: 2024-08-03T10:45:52.681Z Vendors: n/a Products: RStudio Connect Problem Types: Open Redirect Description: RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites. Additional Analyst Notes: - CVE Program Container: References: - https://tenable.com/security/research/tra-2022-30 - https://support.posit.co/hc/en-us/articles/10983374992023
CVE ID: CVE-2022-38132 State: PUBLISHED Published: 2022-08-23T23:16:32.342513Z Last Updated: 2024-09-16T22:56:38.631Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Linksys Products: MR8300 Router Problem Types: CWE-78 Description: Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands. The username and password fields are not sanitized correctly and are used as URL construction arguments, allowing URL redirection to an arbitrary server, downloading an arbitrary script file, and eventually executing t
ments, allowing URL redirection to an arbitrary server, downloading an arbitrary script file, and eventually executing the file in the device. This issue affects: Linksys MR8300 Router 1.0. Additional Analyst Notes: - CVE Program Container: References: - https://downloads.linksys.com/support/assets/releasenotes/MR8300_1.1.10.210186_Customer_ReleaseNotes.txt
CVE ID: CVE-2022-38133 State: PUBLISHED Published: 2022-08-10T15:25:09 Last Updated: 2024-08-03T10:45:52.822Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-532 Description: In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-38134 State: PUBLISHED Published: 2022-09-23T15:14:40.358Z Last Updated: 2025-02-20T20:01:28.267Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: CusRev Products: Customer Reviews for WooCommerce (WordPress plugin) Problem Types: CWE-264 Description: Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/customer-reviews-woocommerce/#developers - https://patchstack.com/database/vulnerability/customer-reviews-woocommerce/wordpress-customer-reviews-for
/#developers - https://patchstack.com/database/vulnerability/customer-reviews-woocommerce/wordpress-customer-reviews-for-woocommerce-plugin-5-3-5-authenticated-broken-access-control-vulnerability/_s_id=cve
CVE ID: CVE-2022-38135 State: PUBLISHED Published: 2022-09-12T19:24:02.998Z Last Updated: 2025-02-20T20:05:55.127Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Dean Oakley Products: Photospace Gallery (WordPress plugin) Problem Types: CWE-264 Description: Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/photospace/wordpress-photospace-gallery-plugin-2-3-5-broken-access-control-vulnerability - https://
tabase/vulnerability/photospace/wordpress-photospace-gallery-plugin-2-3-5-broken-access-control-vulnerability - https://wordpress.org/plugins/photospace/
CVE ID: CVE-2022-38136 State: PUBLISHED Published: 2023-02-06T18:58:01.340Z Last Updated: 2025-01-27T18:26:20.149Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI DPC++/C++ Compiler for Windows and IntelÂ® Fortran Compiler for Windows before version 2022.2.1 for some Intel(R) oneAPI Toolkits Problem Types: escalation of privilege Description: Uncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local acc
kits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00773.html
CVE ID: CVE-2022-38137 State: PUBLISHED Published: 2022-11-08T18:32:20.856Z Last Updated: 2025-02-20T19:55:06.991Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Analytify Products: Analytify (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Analytify plugin <= 4.2.2 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-analytify/wordpress-analytify-plugin-4-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - https://wordpress.org/plugins/wp-analytify/
CVE ID: CVE-2022-38138 State: PUBLISHED Published: 2022-10-11T00:00:00.000Z Last Updated: 2025-04-16T16:09:09.794Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Triangle Microworks Products: Library: IEC 61850, Library: IEC 60870-6 (ICCP/Tase.2) Problem Types: CWE-824 Description: The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or server using the C++, C#, or Java language library with a version number of 5.0.1 or earlier) and 60870-6 (ICCP/TASE.2) Library (Any client or server using a C++ language library with a version number of 4.4.3 or earlier) are vuln
P/TASE.2) Library (Any client or server using a C++ language library with a version number of 4.4.3 or earlier) are vulnerable to access given to a small number of uninitialized pointers within their code. This could allow an attacker to target any client or server using the affected libraries to cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-01
CVE ID: CVE-2022-38139 State: PUBLISHED Published: 2022-09-13T13:59:20.462Z Last Updated: 2025-02-20T20:05:47.883Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: RD Station Products: RD Station (WordPress plugin) Problem Types: CWE-352 Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in RD Station plugin <= 5.2.0 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/integracao-rd-station/wordpress-rd-station-plugin-5-1-3-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve
CVE ID: CVE-2022-38140 State: PUBLISHED Published: 2022-11-28T19:55:06.442Z Last Updated: 2025-02-20T19:48:57.765Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: Squirrly Products: SEO Plugin by Squirrly SEO (WordPress plugin) Problem Types: CWE-434 Description: Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/squirrly-seo/wordpress-seo-plugin-by-squirrly-seo-plugin-12-1-10-auth-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2022-38141 State: PUBLISHED Published: 2024-01-17T16:04:01.862Z Last Updated: 2025-06-17T21:19:16.417Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Zorem Products: Sales Report Email for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-advanced-sales-report-email/wordpress-sales-report-email-for-woocommerce-plugin-2-8-auth-test-email-submission-vulnerab
-advanced-sales-report-email/wordpress-sales-report-email-for-woocommerce-plugin-2-8-auth-test-email-submission-vulnerability?_s_id=cve
CVE ID: CVE-2022-38142 State: PUBLISHED Published: 2022-10-31T19:04:37.834Z Last Updated: 2025-04-16T16:07:06.649Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-502 Description: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/adviso
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-07
CVE ID: CVE-2022-38143 State: PUBLISHED Published: 2022-12-23T23:03:51.372Z Last Updated: 2025-02-13T16:32:59.061Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-123 Description: A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/T
. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1630 - https://security.gentoo.org/glsa/202305-33
CVE ID: CVE-2022-38144 State: PUBLISHED Published: 2022-09-09T14:39:53.606Z Last Updated: 2025-04-23T17:12:36.669Z Vendors: gVectors Team Products: wpForo Forum (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-5-cross-site-request-forgery-csrf-vulnerability/_s_id=cve - https://wordpress.org/plugins/wpforo/#developers
CVE ID: CVE-2022-38145 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:28:02.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta description and get it executed in the versioned history compare view. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.silverstripe.org/download/security-releases/ - https://www.silverstripe.org/blog/tag/release - https://forum.silverstripe.org/c/releases - https://www.silverstripe.org/download/security-releases/CVE-2022-38145
CVE ID: CVE-2022-38146 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-30T15:22:56.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.silverstripe.org/download/security-releases/ - https://www.silverstripe.org/blog/tag/release - https://forum.silverstripe.org/c/releases - https://www.silverstripe.org/download/security-releases/CVE-2022-38146
CVE ID: CVE-2022-38147 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:26:57.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.silverstripe.org/download/security-releases/ - https://www.silverstripe.org/blog/tag/release - https://forum.silverstripe.org/c/releases - https://www.silverstripe.org/download/security-releases/CVE-2022-38147
CVE ID: CVE-2022-38148 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-30T15:27:22.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverstripe silverstripe/framework through 4.11 allows SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.silverstripe.org/download/security-releases/ - https://www.silverstripe.org/blog/tag/release - https://forum.silverstripe.org/c/releases - https://www.silverstripe.org/download/security-releases/CVE-2022-38148
CVE ID: CVE-2022-38149 State: PUBLISHED Published: 2022-08-17T14:30:53 Last Updated: 2024-08-03T10:45:52.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.29.2. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com - https://discuss.hashicorp.com/t/hsec-2022-16-consul-template-may-expose-vault-secrets-when-processing-invalid-input/43215
CVE ID: CVE-2022-38150 State: PUBLISHED Published: 2022-08-11T00:00:00.000Z Last Updated: 2025-10-20T18:03:22.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://varnish-cache.org/security/VSV00009.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2BUKFICL
V00009.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2BUKFICLZBXESLQ3MXMIG3G52RZURFK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW3X4PEKC5C736SCKE2UG3Y7JWKMD2K6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I/
CVE ID: CVE-2022-38152 State: PUBLISHED Published: 2022-08-31T00:00:00 Last Updated: 2024-08-03T10:45:52.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation fault. This occurs in the second session, which is created through TLS session resumption and reuses the initial struct WOLFSSL. If the server reuses the previous session structure (struct WOLFSSL) by calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello (that resumes the previous session) crashes the server. Note that this bug is
ssl) on it, the next received Client Hello (that resumes the previous session) crashes the server. Note that this bug is only triggered when resuming sessions using TLS session resumption. Only servers that use wolfSSL_clear instead of the recommended SSL_free; SSL_new sequence are affected. Furthermore, wolfSSL_clear is part of wolfSSL's compatibility layer and is not enabled by default. It is not part of wolfSSL's native API. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/releases - https://www.wolfssl.com/docs/security-vulnerabilities/ - https://github.com/wolfSSL/wolfssl/pull/5468 - https://github.com/tlspuffin/tlspuffin - http://secli
-vulnerabilities/ - https://github.com/wolfSSL/wolfssl/pull/5468 - https://github.com/tlspuffin/tlspuffin - http://seclists.org/fulldisclosure/2023/Jan/7 - http://packetstormsecurity.com/files/170604/wolfSSL-Session-Resumption-Denial-Of-Service.html - https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/
CVE ID: CVE-2022-38153 State: PUBLISHED Published: 2022-08-31T00:00:00 Last Updated: 2024-08-03T10:45:52.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, only version 5.3.0 is exploitable. Man-in-the-middle attackers or a malicious server can crash TLS 1.2 clients during a handshake. If an attacker injects a large ticket (more than 256 bytes) into a NewSessionTicket message in a TLS 1.2 handshake, and the client has a non-empty session cache, the session cache frees a pointer that points to unallocated memory, causing the client to crash with a "free(): invalid pointer" message. NO
es a pointer that points to unallocated memory, causing the client to crash with a "free(): invalid pointer" message. NOTE: It is likely that this is also exploitable during TLS 1.3 handshakes between a client and a malicious server. With TLS 1.3, it is not possible to exploit this as a man-in-the-middle. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/releases - https://www.wolfssl.com/docs/security-vulnerabilities/ - https://github.com/wolfSSL/wolfssl/pull/5476 - https://github.com/trailofbits/tlspuffin - http://seclists.org/fulldisclosure/2023/Jan/8 - http://packetstormsecurity.com/files/170605/wolfSSL-5.3.0-Denial-Of-Service.html - http
.org/fulldisclosure/2023/Jan/8 - http://packetstormsecurity.com/files/170605/wolfSSL-5.3.0-Denial-Of-Service.html - https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/