CVE-2017-2800
CRITICALwolfSSL < 3.10.2 - Certificate Validation Bypass via Crafted x509 Certificate
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2017-2800. PoCs published by Talos.
AI-analyzed exploit summary This exploit demonstrates an off-by-one write vulnerability in wolfSSL's x509 certificate parsing, leading to potential RCE or DoS. The PoC includes a crafted certificate generated via OpenSSL that triggers the vulnerability.
Description
A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution. In order to trigger this vulnerability, the attacker needs to supply a malicious x509 certificate to either a server or a client application using this library.
Exploits (1)
This exploit demonstrates an off-by-one write vulnerability in wolfSSL's x509 certificate parsing, leading to potential RCE or DoS. The PoC includes a crafted certificate generated via OpenSSL that triggers the vulnerability.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H