CVE-2020-24585

Katalog CVE

CVSS 5.3 · Medium EPSS 0,89%

Kerentanan pada wolfssl. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do not produce an out-of-order error. Instead, these messages are returned to the application.

Rincian

Terbit di NVD

21 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

EPSS (30 hari)

0,89% peluang dieksploitasi; lebih tinggi dari 58,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/wolfSSL/wolfssl/pull/3219 advisory pihak ketiga
• https://github.com/wolfSSL/wolfssl/releases/tag/v4.5.0-stable advisory pihak ketiga