Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/wolfssl@4.1.0%2Bdfsg-1?distro=trixie
Typedeb
Namespacedebian
Namewolfssl
Version4.1.0+dfsg-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.1.0+dfsg-2
Latest_non_vulnerable_version5.9.0-0.1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-15fc-qcja-yfh6
vulnerability_id VCID-15fc-qcja-yfh6
summary
wolfCrypt leaks cryptographic information via timing side channel
wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without `--enable-fpecc`, `--enable-sp`, or` --enable-sp-math`) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about the nonces used and potentially mount a lattice attack to recover the private key used. The issue occurs because ecc.c scalar multiplication might leak the bit length.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-13628
reference_id
reference_type
scores
0
value 0.00145
scoring_system epss
scoring_elements 0.34808
published_at 2026-04-07T12:55:00Z
1
value 0.00145
scoring_system epss
scoring_elements 0.34803
published_at 2026-04-21T12:55:00Z
2
value 0.00145
scoring_system epss
scoring_elements 0.34847
published_at 2026-04-18T12:55:00Z
3
value 0.00145
scoring_system epss
scoring_elements 0.34886
published_at 2026-04-11T12:55:00Z
4
value 0.00145
scoring_system epss
scoring_elements 0.34687
published_at 2026-04-01T12:55:00Z
5
value 0.00145
scoring_system epss
scoring_elements 0.34882
published_at 2026-04-09T12:55:00Z
6
value 0.00145
scoring_system epss
scoring_elements 0.34902
published_at 2026-04-02T12:55:00Z
7
value 0.00145
scoring_system epss
scoring_elements 0.34929
published_at 2026-04-04T12:55:00Z
8
value 0.00145
scoring_system epss
scoring_elements 0.34853
published_at 2026-04-08T12:55:00Z
9
value 0.00145
scoring_system epss
scoring_elements 0.34863
published_at 2026-04-16T12:55:00Z
10
value 0.00145
scoring_system epss
scoring_elements 0.34825
published_at 2026-04-13T12:55:00Z
11
value 0.00145
scoring_system epss
scoring_elements 0.34848
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-13628
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13628
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13628
2
reference_url https://eprint.iacr.org/2011/232.pdf
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://eprint.iacr.org/2011/232.pdf
3
reference_url https://github.com/wolfSSL/wolfcrypt-py
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wolfSSL/wolfcrypt-py
4
reference_url https://minerva.crocs.fi.muni.cz
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://minerva.crocs.fi.muni.cz
5
reference_url https://minerva.crocs.fi.muni.cz/
reference_id
reference_type
scores
url https://minerva.crocs.fi.muni.cz/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-13628
reference_id
reference_type
scores
0
value 1.2
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:N/C:P/I:N/A:N
1
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-13628
7
reference_url https://tches.iacr.org/index.php/TCHES/article/view/7337
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://tches.iacr.org/index.php/TCHES/article/view/7337
8
reference_url http://www.openwall.com/lists/oss-security/2019/10/02/2
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2019/10/02/2
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
10
reference_url https://github.com/advisories/GHSA-q95h-vc86-hv77
reference_id GHSA-q95h-vc86-hv77
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q95h-vc86-hv77
fixed_packages
0
url pkg:deb/debian/wolfssl@5.9.1-0.1?distro=trixie
purl pkg:deb/debian/wolfssl@5.9.1-0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.9.1-0.1%3Fdistro=trixie
1
url pkg:deb/debian/wolfssl@4.1.0%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/wolfssl@4.1.0%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@4.1.0%252Bdfsg-1%3Fdistro=trixie
2
url pkg:deb/debian/wolfssl@4.6.0%2Bp1-0%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/wolfssl@4.6.0%2Bp1-0%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-1u3q-52yd-1bhe
2
vulnerability VCID-24mg-wn6a-6bew
3
vulnerability VCID-24s5-d6jt-4kfe
4
vulnerability VCID-2ry7-trrg-gfdk
5
vulnerability VCID-3gve-u4f4-bkht
6
vulnerability VCID-47nm-nte5-27fm
7
vulnerability VCID-4zda-zrq6-hbc8
8
vulnerability VCID-4zyq-af27-yqa4
9
vulnerability VCID-6n4g-us9a-53g4
10
vulnerability VCID-6v8z-cfax-zqbh
11
vulnerability VCID-75y2-h9uk-n3a6
12
vulnerability VCID-7xbp-qkvv-bqgm
13
vulnerability VCID-8735-ectc-j7a3
14
vulnerability VCID-9hdy-aqa2-w3bd
15
vulnerability VCID-9jb1-k32z-w7gw
16
vulnerability VCID-9jpj-dfsf-qkce
17
vulnerability VCID-9jw2-3v9v-ruap
18
vulnerability VCID-9kev-ferz-5bhr
19
vulnerability VCID-9x14-2t7m-1kbm
20
vulnerability VCID-bfap-h1d9-33dj
21
vulnerability VCID-cum2-vp1j-syfc
22
vulnerability VCID-cv4y-g4un-ckd4
23
vulnerability VCID-cxhw-3w24-dkes
24
vulnerability VCID-dpu2-4w42-kygw
25
vulnerability VCID-euma-vgqx-sbau
26
vulnerability VCID-f4gq-hqcp-dqe2
27
vulnerability VCID-f57c-kamk-3bct
28
vulnerability VCID-f5kd-yqz2-nkcb
29
vulnerability VCID-fmtp-x6y7-83g1
30
vulnerability VCID-g5u9-khw6-4kgn
31
vulnerability VCID-gcfd-w8je-kqfm
32
vulnerability VCID-gdur-h588-vbb6
33
vulnerability VCID-gmdj-a1ys-tqc2
34
vulnerability VCID-gtdh-mytb-t3fh
35
vulnerability VCID-h6na-nxxq-5yg9
36
vulnerability VCID-hdbf-118z-2yec
37
vulnerability VCID-hk8r-kk4v-1fa7
38
vulnerability VCID-jc3b-m4ud-n7fw
39
vulnerability VCID-jvnf-vh29-ufdh
40
vulnerability VCID-jxf4-y1au-5bhw
41
vulnerability VCID-khur-3ax7-9fhb
42
vulnerability VCID-n64w-nq6a-m7bv
43
vulnerability VCID-n6uz-fe7m-uqhk
44
vulnerability VCID-njbj-f91t-b7f4
45
vulnerability VCID-nqhj-d7uw-43hd
46
vulnerability VCID-srmp-3tvp-9uhv
47
vulnerability VCID-su8x-6n42-n3d5
48
vulnerability VCID-u24a-2khf-uyba
49
vulnerability VCID-u55w-unmd-97cm
50
vulnerability VCID-udcq-enxt-wyf1
51
vulnerability VCID-ugd8-9xzt-xbdz
52
vulnerability VCID-uvht-9bt9-hfbb
53
vulnerability VCID-v3m6-zajw-bfhb
54
vulnerability VCID-vugd-2jfz-23b5
55
vulnerability VCID-x3uy-7crx-2kae
56
vulnerability VCID-xfgd-4hs3-vygk
57
vulnerability VCID-xuyn-pjpb-g7du
58
vulnerability VCID-xxkx-w5pc-5uap
59
vulnerability VCID-zhf4-y8v8-gubn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@4.6.0%252Bp1-0%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/wolfssl@5.5.4-2%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/wolfssl@5.5.4-2%2Bdeb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-1u3q-52yd-1bhe
2
vulnerability VCID-24mg-wn6a-6bew
3
vulnerability VCID-24s5-d6jt-4kfe
4
vulnerability VCID-2ry7-trrg-gfdk
5
vulnerability VCID-3gve-u4f4-bkht
6
vulnerability VCID-47nm-nte5-27fm
7
vulnerability VCID-4zda-zrq6-hbc8
8
vulnerability VCID-4zyq-af27-yqa4
9
vulnerability VCID-6v8z-cfax-zqbh
10
vulnerability VCID-75y2-h9uk-n3a6
11
vulnerability VCID-7xbp-qkvv-bqgm
12
vulnerability VCID-8735-ectc-j7a3
13
vulnerability VCID-9hdy-aqa2-w3bd
14
vulnerability VCID-9jb1-k32z-w7gw
15
vulnerability VCID-9jpj-dfsf-qkce
16
vulnerability VCID-9jw2-3v9v-ruap
17
vulnerability VCID-9kev-ferz-5bhr
18
vulnerability VCID-9x14-2t7m-1kbm
19
vulnerability VCID-bfap-h1d9-33dj
20
vulnerability VCID-cv4y-g4un-ckd4
21
vulnerability VCID-cxhw-3w24-dkes
22
vulnerability VCID-dpu2-4w42-kygw
23
vulnerability VCID-euma-vgqx-sbau
24
vulnerability VCID-f57c-kamk-3bct
25
vulnerability VCID-f5kd-yqz2-nkcb
26
vulnerability VCID-fmtp-x6y7-83g1
27
vulnerability VCID-g5u9-khw6-4kgn
28
vulnerability VCID-gcfd-w8je-kqfm
29
vulnerability VCID-gdur-h588-vbb6
30
vulnerability VCID-gmdj-a1ys-tqc2
31
vulnerability VCID-gtdh-mytb-t3fh
32
vulnerability VCID-h6na-nxxq-5yg9
33
vulnerability VCID-hdbf-118z-2yec
34
vulnerability VCID-hk8r-kk4v-1fa7
35
vulnerability VCID-jc3b-m4ud-n7fw
36
vulnerability VCID-jvnf-vh29-ufdh
37
vulnerability VCID-jxf4-y1au-5bhw
38
vulnerability VCID-khur-3ax7-9fhb
39
vulnerability VCID-n64w-nq6a-m7bv
40
vulnerability VCID-n6uz-fe7m-uqhk
41
vulnerability VCID-njbj-f91t-b7f4
42
vulnerability VCID-nqhj-d7uw-43hd
43
vulnerability VCID-srmp-3tvp-9uhv
44
vulnerability VCID-su8x-6n42-n3d5
45
vulnerability VCID-u24a-2khf-uyba
46
vulnerability VCID-u55w-unmd-97cm
47
vulnerability VCID-udcq-enxt-wyf1
48
vulnerability VCID-ugd8-9xzt-xbdz
49
vulnerability VCID-uvht-9bt9-hfbb
50
vulnerability VCID-v3m6-zajw-bfhb
51
vulnerability VCID-vugd-2jfz-23b5
52
vulnerability VCID-x3uy-7crx-2kae
53
vulnerability VCID-xfgd-4hs3-vygk
54
vulnerability VCID-xuyn-pjpb-g7du
55
vulnerability VCID-xxkx-w5pc-5uap
56
vulnerability VCID-zhf4-y8v8-gubn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.5.4-2%252Bdeb12u2%3Fdistro=trixie
4
url pkg:deb/debian/wolfssl@5.7.2-0.1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/wolfssl@5.7.2-0.1%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-24mg-wn6a-6bew
2
vulnerability VCID-2ry7-trrg-gfdk
3
vulnerability VCID-3gve-u4f4-bkht
4
vulnerability VCID-4zda-zrq6-hbc8
5
vulnerability VCID-4zyq-af27-yqa4
6
vulnerability VCID-6v8z-cfax-zqbh
7
vulnerability VCID-75y2-h9uk-n3a6
8
vulnerability VCID-8735-ectc-j7a3
9
vulnerability VCID-9jb1-k32z-w7gw
10
vulnerability VCID-9jpj-dfsf-qkce
11
vulnerability VCID-9jw2-3v9v-ruap
12
vulnerability VCID-9kev-ferz-5bhr
13
vulnerability VCID-9x14-2t7m-1kbm
14
vulnerability VCID-bfap-h1d9-33dj
15
vulnerability VCID-cv4y-g4un-ckd4
16
vulnerability VCID-cxhw-3w24-dkes
17
vulnerability VCID-f57c-kamk-3bct
18
vulnerability VCID-f5kd-yqz2-nkcb
19
vulnerability VCID-fmtp-x6y7-83g1
20
vulnerability VCID-g5u9-khw6-4kgn
21
vulnerability VCID-gcfd-w8je-kqfm
22
vulnerability VCID-gdur-h588-vbb6
23
vulnerability VCID-gmdj-a1ys-tqc2
24
vulnerability VCID-gtdh-mytb-t3fh
25
vulnerability VCID-h6na-nxxq-5yg9
26
vulnerability VCID-hdbf-118z-2yec
27
vulnerability VCID-hk8r-kk4v-1fa7
28
vulnerability VCID-jc3b-m4ud-n7fw
29
vulnerability VCID-jvnf-vh29-ufdh
30
vulnerability VCID-jxf4-y1au-5bhw
31
vulnerability VCID-khur-3ax7-9fhb
32
vulnerability VCID-n64w-nq6a-m7bv
33
vulnerability VCID-n6uz-fe7m-uqhk
34
vulnerability VCID-njbj-f91t-b7f4
35
vulnerability VCID-nqhj-d7uw-43hd
36
vulnerability VCID-srmp-3tvp-9uhv
37
vulnerability VCID-u55w-unmd-97cm
38
vulnerability VCID-udcq-enxt-wyf1
39
vulnerability VCID-ugd8-9xzt-xbdz
40
vulnerability VCID-uvht-9bt9-hfbb
41
vulnerability VCID-v3m6-zajw-bfhb
42
vulnerability VCID-vugd-2jfz-23b5
43
vulnerability VCID-x3uy-7crx-2kae
44
vulnerability VCID-xuyn-pjpb-g7du
45
vulnerability VCID-xxkx-w5pc-5uap
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.7.2-0.1%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/wolfssl@5.9.0-0.2?distro=trixie
purl pkg:deb/debian/wolfssl@5.9.0-0.2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-24mg-wn6a-6bew
2
vulnerability VCID-3gve-u4f4-bkht
3
vulnerability VCID-4zyq-af27-yqa4
4
vulnerability VCID-75y2-h9uk-n3a6
5
vulnerability VCID-9jb1-k32z-w7gw
6
vulnerability VCID-bfap-h1d9-33dj
7
vulnerability VCID-cv4y-g4un-ckd4
8
vulnerability VCID-f5kd-yqz2-nkcb
9
vulnerability VCID-g5u9-khw6-4kgn
10
vulnerability VCID-gtdh-mytb-t3fh
11
vulnerability VCID-hdbf-118z-2yec
12
vulnerability VCID-jc3b-m4ud-n7fw
13
vulnerability VCID-jvnf-vh29-ufdh
14
vulnerability VCID-n6uz-fe7m-uqhk
15
vulnerability VCID-nqhj-d7uw-43hd
16
vulnerability VCID-srmp-3tvp-9uhv
17
vulnerability VCID-u55w-unmd-97cm
18
vulnerability VCID-udcq-enxt-wyf1
19
vulnerability VCID-ugd8-9xzt-xbdz
20
vulnerability VCID-vugd-2jfz-23b5
21
vulnerability VCID-x3uy-7crx-2kae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.9.0-0.2%3Fdistro=trixie
aliases CVE-2019-13628, GHSA-q95h-vc86-hv77
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-15fc-qcja-yfh6
1
url VCID-k6pn-fcqq-q7hs
vulnerability_id VCID-k6pn-fcqq-q7hs
summary It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to leakage of sensible data.
references
0
reference_url http://cat.eyalro.net/
reference_id
reference_type
scores
url http://cat.eyalro.net/
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16870
reference_id
reference_type
scores
0
value 0.00186
scoring_system epss
scoring_elements 0.40373
published_at 2026-04-21T12:55:00Z
1
value 0.00186
scoring_system epss
scoring_elements 0.40448
published_at 2026-04-18T12:55:00Z
2
value 0.00186
scoring_system epss
scoring_elements 0.40369
published_at 2026-04-01T12:55:00Z
3
value 0.00186
scoring_system epss
scoring_elements 0.40457
published_at 2026-04-02T12:55:00Z
4
value 0.00186
scoring_system epss
scoring_elements 0.40483
published_at 2026-04-04T12:55:00Z
5
value 0.00186
scoring_system epss
scoring_elements 0.40405
published_at 2026-04-07T12:55:00Z
6
value 0.00186
scoring_system epss
scoring_elements 0.40456
published_at 2026-04-08T12:55:00Z
7
value 0.00186
scoring_system epss
scoring_elements 0.40468
published_at 2026-04-09T12:55:00Z
8
value 0.00186
scoring_system epss
scoring_elements 0.40488
published_at 2026-04-11T12:55:00Z
9
value 0.00186
scoring_system epss
scoring_elements 0.40452
published_at 2026-04-12T12:55:00Z
10
value 0.00186
scoring_system epss
scoring_elements 0.40432
published_at 2026-04-13T12:55:00Z
11
value 0.00186
scoring_system epss
scoring_elements 0.40479
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16870
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16870
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16870
3
reference_url https://github.com/wolfSSL/wolfssl/pull/1950
reference_id
reference_type
scores
url https://github.com/wolfSSL/wolfssl/pull/1950
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918952
reference_id 918952
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918952
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-16870
reference_id CVE-2018-16870
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:N/A:N
1
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2018-16870
fixed_packages
0
url pkg:deb/debian/wolfssl@5.9.1-0.1?distro=trixie
purl pkg:deb/debian/wolfssl@5.9.1-0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.9.1-0.1%3Fdistro=trixie
1
url pkg:deb/debian/wolfssl@4.1.0%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/wolfssl@4.1.0%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@4.1.0%252Bdfsg-1%3Fdistro=trixie
2
url pkg:deb/debian/wolfssl@4.6.0%2Bp1-0%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/wolfssl@4.6.0%2Bp1-0%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-1u3q-52yd-1bhe
2
vulnerability VCID-24mg-wn6a-6bew
3
vulnerability VCID-24s5-d6jt-4kfe
4
vulnerability VCID-2ry7-trrg-gfdk
5
vulnerability VCID-3gve-u4f4-bkht
6
vulnerability VCID-47nm-nte5-27fm
7
vulnerability VCID-4zda-zrq6-hbc8
8
vulnerability VCID-4zyq-af27-yqa4
9
vulnerability VCID-6n4g-us9a-53g4
10
vulnerability VCID-6v8z-cfax-zqbh
11
vulnerability VCID-75y2-h9uk-n3a6
12
vulnerability VCID-7xbp-qkvv-bqgm
13
vulnerability VCID-8735-ectc-j7a3
14
vulnerability VCID-9hdy-aqa2-w3bd
15
vulnerability VCID-9jb1-k32z-w7gw
16
vulnerability VCID-9jpj-dfsf-qkce
17
vulnerability VCID-9jw2-3v9v-ruap
18
vulnerability VCID-9kev-ferz-5bhr
19
vulnerability VCID-9x14-2t7m-1kbm
20
vulnerability VCID-bfap-h1d9-33dj
21
vulnerability VCID-cum2-vp1j-syfc
22
vulnerability VCID-cv4y-g4un-ckd4
23
vulnerability VCID-cxhw-3w24-dkes
24
vulnerability VCID-dpu2-4w42-kygw
25
vulnerability VCID-euma-vgqx-sbau
26
vulnerability VCID-f4gq-hqcp-dqe2
27
vulnerability VCID-f57c-kamk-3bct
28
vulnerability VCID-f5kd-yqz2-nkcb
29
vulnerability VCID-fmtp-x6y7-83g1
30
vulnerability VCID-g5u9-khw6-4kgn
31
vulnerability VCID-gcfd-w8je-kqfm
32
vulnerability VCID-gdur-h588-vbb6
33
vulnerability VCID-gmdj-a1ys-tqc2
34
vulnerability VCID-gtdh-mytb-t3fh
35
vulnerability VCID-h6na-nxxq-5yg9
36
vulnerability VCID-hdbf-118z-2yec
37
vulnerability VCID-hk8r-kk4v-1fa7
38
vulnerability VCID-jc3b-m4ud-n7fw
39
vulnerability VCID-jvnf-vh29-ufdh
40
vulnerability VCID-jxf4-y1au-5bhw
41
vulnerability VCID-khur-3ax7-9fhb
42
vulnerability VCID-n64w-nq6a-m7bv
43
vulnerability VCID-n6uz-fe7m-uqhk
44
vulnerability VCID-njbj-f91t-b7f4
45
vulnerability VCID-nqhj-d7uw-43hd
46
vulnerability VCID-srmp-3tvp-9uhv
47
vulnerability VCID-su8x-6n42-n3d5
48
vulnerability VCID-u24a-2khf-uyba
49
vulnerability VCID-u55w-unmd-97cm
50
vulnerability VCID-udcq-enxt-wyf1
51
vulnerability VCID-ugd8-9xzt-xbdz
52
vulnerability VCID-uvht-9bt9-hfbb
53
vulnerability VCID-v3m6-zajw-bfhb
54
vulnerability VCID-vugd-2jfz-23b5
55
vulnerability VCID-x3uy-7crx-2kae
56
vulnerability VCID-xfgd-4hs3-vygk
57
vulnerability VCID-xuyn-pjpb-g7du
58
vulnerability VCID-xxkx-w5pc-5uap
59
vulnerability VCID-zhf4-y8v8-gubn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@4.6.0%252Bp1-0%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/wolfssl@5.5.4-2%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/wolfssl@5.5.4-2%2Bdeb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-1u3q-52yd-1bhe
2
vulnerability VCID-24mg-wn6a-6bew
3
vulnerability VCID-24s5-d6jt-4kfe
4
vulnerability VCID-2ry7-trrg-gfdk
5
vulnerability VCID-3gve-u4f4-bkht
6
vulnerability VCID-47nm-nte5-27fm
7
vulnerability VCID-4zda-zrq6-hbc8
8
vulnerability VCID-4zyq-af27-yqa4
9
vulnerability VCID-6v8z-cfax-zqbh
10
vulnerability VCID-75y2-h9uk-n3a6
11
vulnerability VCID-7xbp-qkvv-bqgm
12
vulnerability VCID-8735-ectc-j7a3
13
vulnerability VCID-9hdy-aqa2-w3bd
14
vulnerability VCID-9jb1-k32z-w7gw
15
vulnerability VCID-9jpj-dfsf-qkce
16
vulnerability VCID-9jw2-3v9v-ruap
17
vulnerability VCID-9kev-ferz-5bhr
18
vulnerability VCID-9x14-2t7m-1kbm
19
vulnerability VCID-bfap-h1d9-33dj
20
vulnerability VCID-cv4y-g4un-ckd4
21
vulnerability VCID-cxhw-3w24-dkes
22
vulnerability VCID-dpu2-4w42-kygw
23
vulnerability VCID-euma-vgqx-sbau
24
vulnerability VCID-f57c-kamk-3bct
25
vulnerability VCID-f5kd-yqz2-nkcb
26
vulnerability VCID-fmtp-x6y7-83g1
27
vulnerability VCID-g5u9-khw6-4kgn
28
vulnerability VCID-gcfd-w8je-kqfm
29
vulnerability VCID-gdur-h588-vbb6
30
vulnerability VCID-gmdj-a1ys-tqc2
31
vulnerability VCID-gtdh-mytb-t3fh
32
vulnerability VCID-h6na-nxxq-5yg9
33
vulnerability VCID-hdbf-118z-2yec
34
vulnerability VCID-hk8r-kk4v-1fa7
35
vulnerability VCID-jc3b-m4ud-n7fw
36
vulnerability VCID-jvnf-vh29-ufdh
37
vulnerability VCID-jxf4-y1au-5bhw
38
vulnerability VCID-khur-3ax7-9fhb
39
vulnerability VCID-n64w-nq6a-m7bv
40
vulnerability VCID-n6uz-fe7m-uqhk
41
vulnerability VCID-njbj-f91t-b7f4
42
vulnerability VCID-nqhj-d7uw-43hd
43
vulnerability VCID-srmp-3tvp-9uhv
44
vulnerability VCID-su8x-6n42-n3d5
45
vulnerability VCID-u24a-2khf-uyba
46
vulnerability VCID-u55w-unmd-97cm
47
vulnerability VCID-udcq-enxt-wyf1
48
vulnerability VCID-ugd8-9xzt-xbdz
49
vulnerability VCID-uvht-9bt9-hfbb
50
vulnerability VCID-v3m6-zajw-bfhb
51
vulnerability VCID-vugd-2jfz-23b5
52
vulnerability VCID-x3uy-7crx-2kae
53
vulnerability VCID-xfgd-4hs3-vygk
54
vulnerability VCID-xuyn-pjpb-g7du
55
vulnerability VCID-xxkx-w5pc-5uap
56
vulnerability VCID-zhf4-y8v8-gubn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.5.4-2%252Bdeb12u2%3Fdistro=trixie
4
url pkg:deb/debian/wolfssl@5.7.2-0.1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/wolfssl@5.7.2-0.1%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-24mg-wn6a-6bew
2
vulnerability VCID-2ry7-trrg-gfdk
3
vulnerability VCID-3gve-u4f4-bkht
4
vulnerability VCID-4zda-zrq6-hbc8
5
vulnerability VCID-4zyq-af27-yqa4
6
vulnerability VCID-6v8z-cfax-zqbh
7
vulnerability VCID-75y2-h9uk-n3a6
8
vulnerability VCID-8735-ectc-j7a3
9
vulnerability VCID-9jb1-k32z-w7gw
10
vulnerability VCID-9jpj-dfsf-qkce
11
vulnerability VCID-9jw2-3v9v-ruap
12
vulnerability VCID-9kev-ferz-5bhr
13
vulnerability VCID-9x14-2t7m-1kbm
14
vulnerability VCID-bfap-h1d9-33dj
15
vulnerability VCID-cv4y-g4un-ckd4
16
vulnerability VCID-cxhw-3w24-dkes
17
vulnerability VCID-f57c-kamk-3bct
18
vulnerability VCID-f5kd-yqz2-nkcb
19
vulnerability VCID-fmtp-x6y7-83g1
20
vulnerability VCID-g5u9-khw6-4kgn
21
vulnerability VCID-gcfd-w8je-kqfm
22
vulnerability VCID-gdur-h588-vbb6
23
vulnerability VCID-gmdj-a1ys-tqc2
24
vulnerability VCID-gtdh-mytb-t3fh
25
vulnerability VCID-h6na-nxxq-5yg9
26
vulnerability VCID-hdbf-118z-2yec
27
vulnerability VCID-hk8r-kk4v-1fa7
28
vulnerability VCID-jc3b-m4ud-n7fw
29
vulnerability VCID-jvnf-vh29-ufdh
30
vulnerability VCID-jxf4-y1au-5bhw
31
vulnerability VCID-khur-3ax7-9fhb
32
vulnerability VCID-n64w-nq6a-m7bv
33
vulnerability VCID-n6uz-fe7m-uqhk
34
vulnerability VCID-njbj-f91t-b7f4
35
vulnerability VCID-nqhj-d7uw-43hd
36
vulnerability VCID-srmp-3tvp-9uhv
37
vulnerability VCID-u55w-unmd-97cm
38
vulnerability VCID-udcq-enxt-wyf1
39
vulnerability VCID-ugd8-9xzt-xbdz
40
vulnerability VCID-uvht-9bt9-hfbb
41
vulnerability VCID-v3m6-zajw-bfhb
42
vulnerability VCID-vugd-2jfz-23b5
43
vulnerability VCID-x3uy-7crx-2kae
44
vulnerability VCID-xuyn-pjpb-g7du
45
vulnerability VCID-xxkx-w5pc-5uap
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.7.2-0.1%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/wolfssl@5.9.0-0.2?distro=trixie
purl pkg:deb/debian/wolfssl@5.9.0-0.2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-24mg-wn6a-6bew
2
vulnerability VCID-3gve-u4f4-bkht
3
vulnerability VCID-4zyq-af27-yqa4
4
vulnerability VCID-75y2-h9uk-n3a6
5
vulnerability VCID-9jb1-k32z-w7gw
6
vulnerability VCID-bfap-h1d9-33dj
7
vulnerability VCID-cv4y-g4un-ckd4
8
vulnerability VCID-f5kd-yqz2-nkcb
9
vulnerability VCID-g5u9-khw6-4kgn
10
vulnerability VCID-gtdh-mytb-t3fh
11
vulnerability VCID-hdbf-118z-2yec
12
vulnerability VCID-jc3b-m4ud-n7fw
13
vulnerability VCID-jvnf-vh29-ufdh
14
vulnerability VCID-n6uz-fe7m-uqhk
15
vulnerability VCID-nqhj-d7uw-43hd
16
vulnerability VCID-srmp-3tvp-9uhv
17
vulnerability VCID-u55w-unmd-97cm
18
vulnerability VCID-udcq-enxt-wyf1
19
vulnerability VCID-ugd8-9xzt-xbdz
20
vulnerability VCID-vugd-2jfz-23b5
21
vulnerability VCID-x3uy-7crx-2kae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.9.0-0.2%3Fdistro=trixie
aliases CVE-2018-16870
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k6pn-fcqq-q7hs
2
url VCID-u1xz-kt5a-ybbv
vulnerability_id VCID-u1xz-kt5a-ybbv
summary examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-6439
reference_id
reference_type
scores
0
value 0.01141
scoring_system epss
scoring_elements 0.78446
published_at 2026-04-21T12:55:00Z
1
value 0.01141
scoring_system epss
scoring_elements 0.7845
published_at 2026-04-18T12:55:00Z
2
value 0.01141
scoring_system epss
scoring_elements 0.78371
published_at 2026-04-01T12:55:00Z
3
value 0.01141
scoring_system epss
scoring_elements 0.78377
published_at 2026-04-02T12:55:00Z
4
value 0.01141
scoring_system epss
scoring_elements 0.78408
published_at 2026-04-04T12:55:00Z
5
value 0.01141
scoring_system epss
scoring_elements 0.78391
published_at 2026-04-07T12:55:00Z
6
value 0.01141
scoring_system epss
scoring_elements 0.78418
published_at 2026-04-08T12:55:00Z
7
value 0.01141
scoring_system epss
scoring_elements 0.78423
published_at 2026-04-09T12:55:00Z
8
value 0.01141
scoring_system epss
scoring_elements 0.78449
published_at 2026-04-11T12:55:00Z
9
value 0.01141
scoring_system epss
scoring_elements 0.78431
published_at 2026-04-12T12:55:00Z
10
value 0.01141
scoring_system epss
scoring_elements 0.78424
published_at 2026-04-13T12:55:00Z
11
value 0.01141
scoring_system epss
scoring_elements 0.78452
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-6439
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6439
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6439
2
reference_url https://github.com/wolfSSL/wolfssl/issues/2032
reference_id
reference_type
scores
url https://github.com/wolfSSL/wolfssl/issues/2032
3
reference_url http://www.securityfocus.com/bid/106640
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/106640
4
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-6439
reference_id CVE-2019-6439
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2019-6439
fixed_packages
0
url pkg:deb/debian/wolfssl@5.9.1-0.1?distro=trixie
purl pkg:deb/debian/wolfssl@5.9.1-0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.9.1-0.1%3Fdistro=trixie
1
url pkg:deb/debian/wolfssl@4.1.0%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/wolfssl@4.1.0%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@4.1.0%252Bdfsg-1%3Fdistro=trixie
2
url pkg:deb/debian/wolfssl@4.6.0%2Bp1-0%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/wolfssl@4.6.0%2Bp1-0%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-1u3q-52yd-1bhe
2
vulnerability VCID-24mg-wn6a-6bew
3
vulnerability VCID-24s5-d6jt-4kfe
4
vulnerability VCID-2ry7-trrg-gfdk
5
vulnerability VCID-3gve-u4f4-bkht
6
vulnerability VCID-47nm-nte5-27fm
7
vulnerability VCID-4zda-zrq6-hbc8
8
vulnerability VCID-4zyq-af27-yqa4
9
vulnerability VCID-6n4g-us9a-53g4
10
vulnerability VCID-6v8z-cfax-zqbh
11
vulnerability VCID-75y2-h9uk-n3a6
12
vulnerability VCID-7xbp-qkvv-bqgm
13
vulnerability VCID-8735-ectc-j7a3
14
vulnerability VCID-9hdy-aqa2-w3bd
15
vulnerability VCID-9jb1-k32z-w7gw
16
vulnerability VCID-9jpj-dfsf-qkce
17
vulnerability VCID-9jw2-3v9v-ruap
18
vulnerability VCID-9kev-ferz-5bhr
19
vulnerability VCID-9x14-2t7m-1kbm
20
vulnerability VCID-bfap-h1d9-33dj
21
vulnerability VCID-cum2-vp1j-syfc
22
vulnerability VCID-cv4y-g4un-ckd4
23
vulnerability VCID-cxhw-3w24-dkes
24
vulnerability VCID-dpu2-4w42-kygw
25
vulnerability VCID-euma-vgqx-sbau
26
vulnerability VCID-f4gq-hqcp-dqe2
27
vulnerability VCID-f57c-kamk-3bct
28
vulnerability VCID-f5kd-yqz2-nkcb
29
vulnerability VCID-fmtp-x6y7-83g1
30
vulnerability VCID-g5u9-khw6-4kgn
31
vulnerability VCID-gcfd-w8je-kqfm
32
vulnerability VCID-gdur-h588-vbb6
33
vulnerability VCID-gmdj-a1ys-tqc2
34
vulnerability VCID-gtdh-mytb-t3fh
35
vulnerability VCID-h6na-nxxq-5yg9
36
vulnerability VCID-hdbf-118z-2yec
37
vulnerability VCID-hk8r-kk4v-1fa7
38
vulnerability VCID-jc3b-m4ud-n7fw
39
vulnerability VCID-jvnf-vh29-ufdh
40
vulnerability VCID-jxf4-y1au-5bhw
41
vulnerability VCID-khur-3ax7-9fhb
42
vulnerability VCID-n64w-nq6a-m7bv
43
vulnerability VCID-n6uz-fe7m-uqhk
44
vulnerability VCID-njbj-f91t-b7f4
45
vulnerability VCID-nqhj-d7uw-43hd
46
vulnerability VCID-srmp-3tvp-9uhv
47
vulnerability VCID-su8x-6n42-n3d5
48
vulnerability VCID-u24a-2khf-uyba
49
vulnerability VCID-u55w-unmd-97cm
50
vulnerability VCID-udcq-enxt-wyf1
51
vulnerability VCID-ugd8-9xzt-xbdz
52
vulnerability VCID-uvht-9bt9-hfbb
53
vulnerability VCID-v3m6-zajw-bfhb
54
vulnerability VCID-vugd-2jfz-23b5
55
vulnerability VCID-x3uy-7crx-2kae
56
vulnerability VCID-xfgd-4hs3-vygk
57
vulnerability VCID-xuyn-pjpb-g7du
58
vulnerability VCID-xxkx-w5pc-5uap
59
vulnerability VCID-zhf4-y8v8-gubn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@4.6.0%252Bp1-0%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/wolfssl@5.5.4-2%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/wolfssl@5.5.4-2%2Bdeb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-1u3q-52yd-1bhe
2
vulnerability VCID-24mg-wn6a-6bew
3
vulnerability VCID-24s5-d6jt-4kfe
4
vulnerability VCID-2ry7-trrg-gfdk
5
vulnerability VCID-3gve-u4f4-bkht
6
vulnerability VCID-47nm-nte5-27fm
7
vulnerability VCID-4zda-zrq6-hbc8
8
vulnerability VCID-4zyq-af27-yqa4
9
vulnerability VCID-6v8z-cfax-zqbh
10
vulnerability VCID-75y2-h9uk-n3a6
11
vulnerability VCID-7xbp-qkvv-bqgm
12
vulnerability VCID-8735-ectc-j7a3
13
vulnerability VCID-9hdy-aqa2-w3bd
14
vulnerability VCID-9jb1-k32z-w7gw
15
vulnerability VCID-9jpj-dfsf-qkce
16
vulnerability VCID-9jw2-3v9v-ruap
17
vulnerability VCID-9kev-ferz-5bhr
18
vulnerability VCID-9x14-2t7m-1kbm
19
vulnerability VCID-bfap-h1d9-33dj
20
vulnerability VCID-cv4y-g4un-ckd4
21
vulnerability VCID-cxhw-3w24-dkes
22
vulnerability VCID-dpu2-4w42-kygw
23
vulnerability VCID-euma-vgqx-sbau
24
vulnerability VCID-f57c-kamk-3bct
25
vulnerability VCID-f5kd-yqz2-nkcb
26
vulnerability VCID-fmtp-x6y7-83g1
27
vulnerability VCID-g5u9-khw6-4kgn
28
vulnerability VCID-gcfd-w8je-kqfm
29
vulnerability VCID-gdur-h588-vbb6
30
vulnerability VCID-gmdj-a1ys-tqc2
31
vulnerability VCID-gtdh-mytb-t3fh
32
vulnerability VCID-h6na-nxxq-5yg9
33
vulnerability VCID-hdbf-118z-2yec
34
vulnerability VCID-hk8r-kk4v-1fa7
35
vulnerability VCID-jc3b-m4ud-n7fw
36
vulnerability VCID-jvnf-vh29-ufdh
37
vulnerability VCID-jxf4-y1au-5bhw
38
vulnerability VCID-khur-3ax7-9fhb
39
vulnerability VCID-n64w-nq6a-m7bv
40
vulnerability VCID-n6uz-fe7m-uqhk
41
vulnerability VCID-njbj-f91t-b7f4
42
vulnerability VCID-nqhj-d7uw-43hd
43
vulnerability VCID-srmp-3tvp-9uhv
44
vulnerability VCID-su8x-6n42-n3d5
45
vulnerability VCID-u24a-2khf-uyba
46
vulnerability VCID-u55w-unmd-97cm
47
vulnerability VCID-udcq-enxt-wyf1
48
vulnerability VCID-ugd8-9xzt-xbdz
49
vulnerability VCID-uvht-9bt9-hfbb
50
vulnerability VCID-v3m6-zajw-bfhb
51
vulnerability VCID-vugd-2jfz-23b5
52
vulnerability VCID-x3uy-7crx-2kae
53
vulnerability VCID-xfgd-4hs3-vygk
54
vulnerability VCID-xuyn-pjpb-g7du
55
vulnerability VCID-xxkx-w5pc-5uap
56
vulnerability VCID-zhf4-y8v8-gubn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.5.4-2%252Bdeb12u2%3Fdistro=trixie
4
url pkg:deb/debian/wolfssl@5.7.2-0.1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/wolfssl@5.7.2-0.1%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-24mg-wn6a-6bew
2
vulnerability VCID-2ry7-trrg-gfdk
3
vulnerability VCID-3gve-u4f4-bkht
4
vulnerability VCID-4zda-zrq6-hbc8
5
vulnerability VCID-4zyq-af27-yqa4
6
vulnerability VCID-6v8z-cfax-zqbh
7
vulnerability VCID-75y2-h9uk-n3a6
8
vulnerability VCID-8735-ectc-j7a3
9
vulnerability VCID-9jb1-k32z-w7gw
10
vulnerability VCID-9jpj-dfsf-qkce
11
vulnerability VCID-9jw2-3v9v-ruap
12
vulnerability VCID-9kev-ferz-5bhr
13
vulnerability VCID-9x14-2t7m-1kbm
14
vulnerability VCID-bfap-h1d9-33dj
15
vulnerability VCID-cv4y-g4un-ckd4
16
vulnerability VCID-cxhw-3w24-dkes
17
vulnerability VCID-f57c-kamk-3bct
18
vulnerability VCID-f5kd-yqz2-nkcb
19
vulnerability VCID-fmtp-x6y7-83g1
20
vulnerability VCID-g5u9-khw6-4kgn
21
vulnerability VCID-gcfd-w8je-kqfm
22
vulnerability VCID-gdur-h588-vbb6
23
vulnerability VCID-gmdj-a1ys-tqc2
24
vulnerability VCID-gtdh-mytb-t3fh
25
vulnerability VCID-h6na-nxxq-5yg9
26
vulnerability VCID-hdbf-118z-2yec
27
vulnerability VCID-hk8r-kk4v-1fa7
28
vulnerability VCID-jc3b-m4ud-n7fw
29
vulnerability VCID-jvnf-vh29-ufdh
30
vulnerability VCID-jxf4-y1au-5bhw
31
vulnerability VCID-khur-3ax7-9fhb
32
vulnerability VCID-n64w-nq6a-m7bv
33
vulnerability VCID-n6uz-fe7m-uqhk
34
vulnerability VCID-njbj-f91t-b7f4
35
vulnerability VCID-nqhj-d7uw-43hd
36
vulnerability VCID-srmp-3tvp-9uhv
37
vulnerability VCID-u55w-unmd-97cm
38
vulnerability VCID-udcq-enxt-wyf1
39
vulnerability VCID-ugd8-9xzt-xbdz
40
vulnerability VCID-uvht-9bt9-hfbb
41
vulnerability VCID-v3m6-zajw-bfhb
42
vulnerability VCID-vugd-2jfz-23b5
43
vulnerability VCID-x3uy-7crx-2kae
44
vulnerability VCID-xuyn-pjpb-g7du
45
vulnerability VCID-xxkx-w5pc-5uap
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.7.2-0.1%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/wolfssl@5.9.0-0.2?distro=trixie
purl pkg:deb/debian/wolfssl@5.9.0-0.2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-24mg-wn6a-6bew
2
vulnerability VCID-3gve-u4f4-bkht
3
vulnerability VCID-4zyq-af27-yqa4
4
vulnerability VCID-75y2-h9uk-n3a6
5
vulnerability VCID-9jb1-k32z-w7gw
6
vulnerability VCID-bfap-h1d9-33dj
7
vulnerability VCID-cv4y-g4un-ckd4
8
vulnerability VCID-f5kd-yqz2-nkcb
9
vulnerability VCID-g5u9-khw6-4kgn
10
vulnerability VCID-gtdh-mytb-t3fh
11
vulnerability VCID-hdbf-118z-2yec
12
vulnerability VCID-jc3b-m4ud-n7fw
13
vulnerability VCID-jvnf-vh29-ufdh
14
vulnerability VCID-n6uz-fe7m-uqhk
15
vulnerability VCID-nqhj-d7uw-43hd
16
vulnerability VCID-srmp-3tvp-9uhv
17
vulnerability VCID-u55w-unmd-97cm
18
vulnerability VCID-udcq-enxt-wyf1
19
vulnerability VCID-ugd8-9xzt-xbdz
20
vulnerability VCID-vugd-2jfz-23b5
21
vulnerability VCID-x3uy-7crx-2kae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.9.0-0.2%3Fdistro=trixie
aliases CVE-2019-6439
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u1xz-kt5a-ybbv
3
url VCID-vj57-tszp-ruaf
vulnerability_id VCID-vj57-tszp-ruaf
summary wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a crafted hello client packet over the network to a TLSv1.3 wolfSSL server. The length fields of the packet: record length, client hello length, total extensions length, PSK extension length, total identity length, and identity length contain their maximum value which is 2^16. The identity data field of the PSK extension of the packet contains the attack data, to be stored in the undefined memory (RAM) of the server. The size of the data is about 65 kB. Possibly the attacker can perform a remote code execution attack.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-11873
reference_id
reference_type
scores
0
value 0.07108
scoring_system epss
scoring_elements 0.91491
published_at 2026-04-01T12:55:00Z
1
value 0.07108
scoring_system epss
scoring_elements 0.91498
published_at 2026-04-02T12:55:00Z
2
value 0.07108
scoring_system epss
scoring_elements 0.91504
published_at 2026-04-04T12:55:00Z
3
value 0.07108
scoring_system epss
scoring_elements 0.91512
published_at 2026-04-07T12:55:00Z
4
value 0.07108
scoring_system epss
scoring_elements 0.91524
published_at 2026-04-08T12:55:00Z
5
value 0.07108
scoring_system epss
scoring_elements 0.91531
published_at 2026-04-09T12:55:00Z
6
value 0.07108
scoring_system epss
scoring_elements 0.91535
published_at 2026-04-13T12:55:00Z
7
value 0.07108
scoring_system epss
scoring_elements 0.91537
published_at 2026-04-12T12:55:00Z
8
value 0.07108
scoring_system epss
scoring_elements 0.91557
published_at 2026-04-16T12:55:00Z
9
value 0.07108
scoring_system epss
scoring_elements 0.91553
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-11873
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11873
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11873
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929468
reference_id 929468
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929468
fixed_packages
0
url pkg:deb/debian/wolfssl@5.9.1-0.1?distro=trixie
purl pkg:deb/debian/wolfssl@5.9.1-0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.9.1-0.1%3Fdistro=trixie
1
url pkg:deb/debian/wolfssl@4.1.0%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/wolfssl@4.1.0%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@4.1.0%252Bdfsg-1%3Fdistro=trixie
2
url pkg:deb/debian/wolfssl@4.6.0%2Bp1-0%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/wolfssl@4.6.0%2Bp1-0%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-1u3q-52yd-1bhe
2
vulnerability VCID-24mg-wn6a-6bew
3
vulnerability VCID-24s5-d6jt-4kfe
4
vulnerability VCID-2ry7-trrg-gfdk
5
vulnerability VCID-3gve-u4f4-bkht
6
vulnerability VCID-47nm-nte5-27fm
7
vulnerability VCID-4zda-zrq6-hbc8
8
vulnerability VCID-4zyq-af27-yqa4
9
vulnerability VCID-6n4g-us9a-53g4
10
vulnerability VCID-6v8z-cfax-zqbh
11
vulnerability VCID-75y2-h9uk-n3a6
12
vulnerability VCID-7xbp-qkvv-bqgm
13
vulnerability VCID-8735-ectc-j7a3
14
vulnerability VCID-9hdy-aqa2-w3bd
15
vulnerability VCID-9jb1-k32z-w7gw
16
vulnerability VCID-9jpj-dfsf-qkce
17
vulnerability VCID-9jw2-3v9v-ruap
18
vulnerability VCID-9kev-ferz-5bhr
19
vulnerability VCID-9x14-2t7m-1kbm
20
vulnerability VCID-bfap-h1d9-33dj
21
vulnerability VCID-cum2-vp1j-syfc
22
vulnerability VCID-cv4y-g4un-ckd4
23
vulnerability VCID-cxhw-3w24-dkes
24
vulnerability VCID-dpu2-4w42-kygw
25
vulnerability VCID-euma-vgqx-sbau
26
vulnerability VCID-f4gq-hqcp-dqe2
27
vulnerability VCID-f57c-kamk-3bct
28
vulnerability VCID-f5kd-yqz2-nkcb
29
vulnerability VCID-fmtp-x6y7-83g1
30
vulnerability VCID-g5u9-khw6-4kgn
31
vulnerability VCID-gcfd-w8je-kqfm
32
vulnerability VCID-gdur-h588-vbb6
33
vulnerability VCID-gmdj-a1ys-tqc2
34
vulnerability VCID-gtdh-mytb-t3fh
35
vulnerability VCID-h6na-nxxq-5yg9
36
vulnerability VCID-hdbf-118z-2yec
37
vulnerability VCID-hk8r-kk4v-1fa7
38
vulnerability VCID-jc3b-m4ud-n7fw
39
vulnerability VCID-jvnf-vh29-ufdh
40
vulnerability VCID-jxf4-y1au-5bhw
41
vulnerability VCID-khur-3ax7-9fhb
42
vulnerability VCID-n64w-nq6a-m7bv
43
vulnerability VCID-n6uz-fe7m-uqhk
44
vulnerability VCID-njbj-f91t-b7f4
45
vulnerability VCID-nqhj-d7uw-43hd
46
vulnerability VCID-srmp-3tvp-9uhv
47
vulnerability VCID-su8x-6n42-n3d5
48
vulnerability VCID-u24a-2khf-uyba
49
vulnerability VCID-u55w-unmd-97cm
50
vulnerability VCID-udcq-enxt-wyf1
51
vulnerability VCID-ugd8-9xzt-xbdz
52
vulnerability VCID-uvht-9bt9-hfbb
53
vulnerability VCID-v3m6-zajw-bfhb
54
vulnerability VCID-vugd-2jfz-23b5
55
vulnerability VCID-x3uy-7crx-2kae
56
vulnerability VCID-xfgd-4hs3-vygk
57
vulnerability VCID-xuyn-pjpb-g7du
58
vulnerability VCID-xxkx-w5pc-5uap
59
vulnerability VCID-zhf4-y8v8-gubn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@4.6.0%252Bp1-0%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/wolfssl@5.5.4-2%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/wolfssl@5.5.4-2%2Bdeb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-1u3q-52yd-1bhe
2
vulnerability VCID-24mg-wn6a-6bew
3
vulnerability VCID-24s5-d6jt-4kfe
4
vulnerability VCID-2ry7-trrg-gfdk
5
vulnerability VCID-3gve-u4f4-bkht
6
vulnerability VCID-47nm-nte5-27fm
7
vulnerability VCID-4zda-zrq6-hbc8
8
vulnerability VCID-4zyq-af27-yqa4
9
vulnerability VCID-6v8z-cfax-zqbh
10
vulnerability VCID-75y2-h9uk-n3a6
11
vulnerability VCID-7xbp-qkvv-bqgm
12
vulnerability VCID-8735-ectc-j7a3
13
vulnerability VCID-9hdy-aqa2-w3bd
14
vulnerability VCID-9jb1-k32z-w7gw
15
vulnerability VCID-9jpj-dfsf-qkce
16
vulnerability VCID-9jw2-3v9v-ruap
17
vulnerability VCID-9kev-ferz-5bhr
18
vulnerability VCID-9x14-2t7m-1kbm
19
vulnerability VCID-bfap-h1d9-33dj
20
vulnerability VCID-cv4y-g4un-ckd4
21
vulnerability VCID-cxhw-3w24-dkes
22
vulnerability VCID-dpu2-4w42-kygw
23
vulnerability VCID-euma-vgqx-sbau
24
vulnerability VCID-f57c-kamk-3bct
25
vulnerability VCID-f5kd-yqz2-nkcb
26
vulnerability VCID-fmtp-x6y7-83g1
27
vulnerability VCID-g5u9-khw6-4kgn
28
vulnerability VCID-gcfd-w8je-kqfm
29
vulnerability VCID-gdur-h588-vbb6
30
vulnerability VCID-gmdj-a1ys-tqc2
31
vulnerability VCID-gtdh-mytb-t3fh
32
vulnerability VCID-h6na-nxxq-5yg9
33
vulnerability VCID-hdbf-118z-2yec
34
vulnerability VCID-hk8r-kk4v-1fa7
35
vulnerability VCID-jc3b-m4ud-n7fw
36
vulnerability VCID-jvnf-vh29-ufdh
37
vulnerability VCID-jxf4-y1au-5bhw
38
vulnerability VCID-khur-3ax7-9fhb
39
vulnerability VCID-n64w-nq6a-m7bv
40
vulnerability VCID-n6uz-fe7m-uqhk
41
vulnerability VCID-njbj-f91t-b7f4
42
vulnerability VCID-nqhj-d7uw-43hd
43
vulnerability VCID-srmp-3tvp-9uhv
44
vulnerability VCID-su8x-6n42-n3d5
45
vulnerability VCID-u24a-2khf-uyba
46
vulnerability VCID-u55w-unmd-97cm
47
vulnerability VCID-udcq-enxt-wyf1
48
vulnerability VCID-ugd8-9xzt-xbdz
49
vulnerability VCID-uvht-9bt9-hfbb
50
vulnerability VCID-v3m6-zajw-bfhb
51
vulnerability VCID-vugd-2jfz-23b5
52
vulnerability VCID-x3uy-7crx-2kae
53
vulnerability VCID-xfgd-4hs3-vygk
54
vulnerability VCID-xuyn-pjpb-g7du
55
vulnerability VCID-xxkx-w5pc-5uap
56
vulnerability VCID-zhf4-y8v8-gubn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.5.4-2%252Bdeb12u2%3Fdistro=trixie
4
url pkg:deb/debian/wolfssl@5.7.2-0.1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/wolfssl@5.7.2-0.1%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-24mg-wn6a-6bew
2
vulnerability VCID-2ry7-trrg-gfdk
3
vulnerability VCID-3gve-u4f4-bkht
4
vulnerability VCID-4zda-zrq6-hbc8
5
vulnerability VCID-4zyq-af27-yqa4
6
vulnerability VCID-6v8z-cfax-zqbh
7
vulnerability VCID-75y2-h9uk-n3a6
8
vulnerability VCID-8735-ectc-j7a3
9
vulnerability VCID-9jb1-k32z-w7gw
10
vulnerability VCID-9jpj-dfsf-qkce
11
vulnerability VCID-9jw2-3v9v-ruap
12
vulnerability VCID-9kev-ferz-5bhr
13
vulnerability VCID-9x14-2t7m-1kbm
14
vulnerability VCID-bfap-h1d9-33dj
15
vulnerability VCID-cv4y-g4un-ckd4
16
vulnerability VCID-cxhw-3w24-dkes
17
vulnerability VCID-f57c-kamk-3bct
18
vulnerability VCID-f5kd-yqz2-nkcb
19
vulnerability VCID-fmtp-x6y7-83g1
20
vulnerability VCID-g5u9-khw6-4kgn
21
vulnerability VCID-gcfd-w8je-kqfm
22
vulnerability VCID-gdur-h588-vbb6
23
vulnerability VCID-gmdj-a1ys-tqc2
24
vulnerability VCID-gtdh-mytb-t3fh
25
vulnerability VCID-h6na-nxxq-5yg9
26
vulnerability VCID-hdbf-118z-2yec
27
vulnerability VCID-hk8r-kk4v-1fa7
28
vulnerability VCID-jc3b-m4ud-n7fw
29
vulnerability VCID-jvnf-vh29-ufdh
30
vulnerability VCID-jxf4-y1au-5bhw
31
vulnerability VCID-khur-3ax7-9fhb
32
vulnerability VCID-n64w-nq6a-m7bv
33
vulnerability VCID-n6uz-fe7m-uqhk
34
vulnerability VCID-njbj-f91t-b7f4
35
vulnerability VCID-nqhj-d7uw-43hd
36
vulnerability VCID-srmp-3tvp-9uhv
37
vulnerability VCID-u55w-unmd-97cm
38
vulnerability VCID-udcq-enxt-wyf1
39
vulnerability VCID-ugd8-9xzt-xbdz
40
vulnerability VCID-uvht-9bt9-hfbb
41
vulnerability VCID-v3m6-zajw-bfhb
42
vulnerability VCID-vugd-2jfz-23b5
43
vulnerability VCID-x3uy-7crx-2kae
44
vulnerability VCID-xuyn-pjpb-g7du
45
vulnerability VCID-xxkx-w5pc-5uap
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.7.2-0.1%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/wolfssl@5.9.0-0.2?distro=trixie
purl pkg:deb/debian/wolfssl@5.9.0-0.2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-15fz-hhc7-kyaa
1
vulnerability VCID-24mg-wn6a-6bew
2
vulnerability VCID-3gve-u4f4-bkht
3
vulnerability VCID-4zyq-af27-yqa4
4
vulnerability VCID-75y2-h9uk-n3a6
5
vulnerability VCID-9jb1-k32z-w7gw
6
vulnerability VCID-bfap-h1d9-33dj
7
vulnerability VCID-cv4y-g4un-ckd4
8
vulnerability VCID-f5kd-yqz2-nkcb
9
vulnerability VCID-g5u9-khw6-4kgn
10
vulnerability VCID-gtdh-mytb-t3fh
11
vulnerability VCID-hdbf-118z-2yec
12
vulnerability VCID-jc3b-m4ud-n7fw
13
vulnerability VCID-jvnf-vh29-ufdh
14
vulnerability VCID-n6uz-fe7m-uqhk
15
vulnerability VCID-nqhj-d7uw-43hd
16
vulnerability VCID-srmp-3tvp-9uhv
17
vulnerability VCID-u55w-unmd-97cm
18
vulnerability VCID-udcq-enxt-wyf1
19
vulnerability VCID-ugd8-9xzt-xbdz
20
vulnerability VCID-vugd-2jfz-23b5
21
vulnerability VCID-x3uy-7crx-2kae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@5.9.0-0.2%3Fdistro=trixie
aliases CVE-2019-11873
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vj57-tszp-ruaf
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/wolfssl@4.1.0%252Bdfsg-1%3Fdistro=trixie