tocsin

Debian/wolfssl: medium 5.9

An issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, only version 5.3.0 is exploitable. Man-in-the-middle attackers or a malicious server can crash TLS 1.2

Action: Upgrade wolfssl to 5.5.3-1 or later.

Affected

introducedfixedlast affected
05.5.3-1-

Fixed versions

5.5.3-1

Sources

published · modified · JSON