Stack buffer overflow in WolfSSL before 3.13.0

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

During some tests of TLS libraries I found a stack buffer overflow vulnerability in the WolfSSL library. Finding this one was surprisingly simple: I had a wolfssl server that was compiled with address sanitizer and ran the SSL Labs test against it. The bug happens in the parsing of the signature hash algorithm list that is sent in a ClientHello and is basically a textbook stack buffer overflow.…

Read on blog.fuzzing-project.org ↗