CVE-2022-25638
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs w...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the sig_algo field differs between the certificate_verify message and the certificate message.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-25638 wolfssl Corrigé dans: 4.6.0+p1-0+deb11u1
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web wolfssl.com