NetSight
high7.5

CVE-2017-8855

wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.

Impact

wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.

Affected products

VendorProductAffected versions
WolfsslWolfssl
through 3.10.4

References