Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/wolfssl@4.2.0%2Bdfsg-3?distro=trixie
purl pkg:deb/debian/wolfssl@4.2.0%2Bdfsg-3?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-dwyw-64yp-vygf In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the domain name location index is mishandled. Because a pointer is overwritten, there is an invalid free. CVE-2019-18840

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T08:52:59.435963+00:00 Debian Importer Fixing VCID-dwyw-64yp-vygf https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T17:57:41.259612+00:00 Debian Importer Fixing VCID-dwyw-64yp-vygf https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:57:42.289404+00:00 Debian Importer Fixing VCID-dwyw-64yp-vygf https://security-tracker.debian.org/tracker/data/json 38.1.0