Vulnerability Lookup

🛡️ CVE-2022-38153

🟡 CVSS 5.9 — Medium ⚠️ Exploit Public CWE-770 NVD

5.9

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

An issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, only version 5.3.0 is exploitable. Man-in-the-middle attackers or a malicious server can crash TLS 1.2 clients during a handshake. If an attacker injects a large ticket (more than 256 bytes) into a NewSessionTicket message in a TLS 1.2 handshake, and the client has a non-empty session cache, the session cache frees a pointer that points to unallocated memory, causing the client to crash with a "free(): invalid pointer" message. NOTE: It is likely that this is also exploitable during TLS 1.3 handshakes between a client and a malicious server. With TLS 1.3, it is not possible to exploit this as a man-in-the-middle.

Details

Severity MEDIUM

CVSS Score 5.9

CVSS Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE CWE-770

Public Exploit ⚠️ Yes

Source NVD

Published 2022-08-31

Updated 2026-06-08

Modified 2024-11-21

Fix URL https://github.com/wolfSSL/wolfssl/pull/5476

Affected Packages

Software	From version	Fixed in
wolfssl	—	—

References

Exploit, Third Party Advisory http://packetstormsecurity.com/files/170605/wolfSSL-5.3.0-Denial-Of-Service.html

Exploit, Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2023/Jan/8

Third Party Advisory https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/

Not Applicable https://github.com/trailofbits/tlspuffin

Exploit, Patch, Third Party Advisory https://github.com/wolfSSL/wolfssl/pull/5476

Release Notes https://github.com/wolfSSL/wolfssl/releases

Vendor Advisory https://www.wolfssl.com/docs/security-vulnerabilities/

Exploit, Third Party Advisory http://packetstormsecurity.com/files/170605/wolfSSL-5.3.0-Denial-Of-Service.html

Exploit, Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2023/Jan/8

Third Party Advisory https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/

Not Applicable https://github.com/trailofbits/tlspuffin

Exploit, Patch, Third Party Advisory https://github.com/wolfSSL/wolfssl/pull/5476

Release Notes https://github.com/wolfSSL/wolfssl/releases

Vendor Advisory https://www.wolfssl.com/docs/security-vulnerabilities/

🔗 NVD 🔗 Mitre ✅ Fix / Advisory

Similar Threats

Site Security Check

Concerned your site may already be targeted?

BotEraser analyzes incoming traffic patterns and helps identify bot behavior consistent with known exploit attempts.

Check My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Concerned your site may already be targeted?

Company

Resources

Services

Trusted

Subscribe