Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (5)
| Vulnerability |
Summary |
Aliases |
|
VCID-5wuh-hgt7-4qcj
|
wolfssl before 3.2.0 has a server certificate that is not properly authorized for server authentication.
|
CVE-2014-2904
|
|
VCID-jcyf-gcxb-7ucj
|
CyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers to spoof servers via a crafted server certificate not authorized for use in an SSL/TLS handshake.
|
CVE-2014-2903
|
|
VCID-ktqb-4xkh-jkc4
|
wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates.
|
CVE-2014-2902
|
|
VCID-ta4b-he3j-jya7
|
wolfssl before 3.2.0 does not properly issue certificates for a server's hostname.
|
CVE-2014-2901
|
|
VCID-xap5-djda-2uem
|
Multiple vulnerabilities have been found in Oracle JRE/JDK,
allowing both local and remote attackers to compromise various Java
components.
|
CVE-2014-3566
|