This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2021-37155 →
DEBIAN-CVE-2021-37155
wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number i...
Original description
The description as published by the source.
wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
wolfssl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-1"}]}]
Debian:13
wolfssl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-1"}]}]
References
- advisory security-tracker.debian.org