CVE-2020-12457

An issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message processing logic for TLS 1.3. If an attacker sends ChangeCipherSpec messages in a crafted way involving more than one in a row, the server becomes stuck in the ProcessReply() loop, i.e., a denial of service.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-08-21 14:15

Updated : 2024-02-04 21:00


NVD link : CVE-2020-12457

Mitre link : CVE-2020-12457

CVE.ORG link : CVE-2020-12457


JSON object : View

Products Affected

wolfssl

  • wolfssl
CWE
CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')