tocsin

Alpine/wolfssl: critical 9.8

Heap-based buffer overflow in the KCAPI ECC code path of wc_ecc_import_x963_ex() in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past the bounds of the pubkey_raw buffe

Action: Upgrade wolfssl to 5.9.0-r0 or later.

Affected

introducedfixedlast affected
05.9.0-r0-

Fixed versions

5.9.0-r0

Sources

published · modified · JSON