Malicious Packet Sender Can Crash or Cause Out of Bounds Read

CVE-2024-0901

Summary

The vulnerability presents a risk of remotely executed SEGV and out of bounds read, which allows attackers to cause intentional crashes or access invalid memory segments. This exploit occurs through the transmission of malformed packets that adhere to specific length requirements. As a result, it poses a significant security risk for servers and applications utilizing affected wolfSSL versions. Proper validation of incoming packets is crucial to mitigate potential exploitation.

References