CVE-2014-2896 | BDVDB-2026-129882 Detail

Description#

The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an out-of-bounds read.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.html
http://www.wolfssl.com/yaSSL/Docs-cyassl-changelog.html
http://seclists.org/oss-sec/2014/q2/126
http://seclists.org/oss-sec/2014/q2/130

Exploit#

No public exploit known

History#

Version 12020-01-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.