CVE-2024-5991
In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509_check_host() takes in a pointer and length to check against, with no requirements that it be NULL terminated. If a caller was attempting to do a name check on a non-NULL terminated buffer, the code would read beyond the bounds of the input array until it found a NULL terminator.This issue affects wolfSSL: through 5.7.0.
- Wolfssl
- ≤ 5.7.0
- CVSS 4.0
- 10.0 CRITICAL
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 0.6% (43th percentile)
- Weakness
- CWE-125
- NVD status
- Analyzed
- Published
- 2024-08-27
- Attack patterns
- CAPEC-100
Fix
Fixed in the following github pull request https://https://github.com/wolfSSL/wolfssl/pull/7604
No indexed exploits for CVE-2024-5991 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2024-5991 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.