CVE-2017-8854
Fixed in a distro release EPSS 2%
wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed temporary DH file.
Products: wolfssl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wolfssl | 3.10.2+dfsg-1 |
| Debian 13 | wolfssl | 3.10.2+dfsg-1 |
| Ubuntu 16.04 LTS | wolfssl | no fix |