CVE-2014-2899

Published: Apr 22, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a request for the peer certificate when a certificate parsing failure occurs or (2) a client_key_exchange message when the ephemeral key is not found.

Affected (45)

Products: Yassl: Cyassl

Yassl

1 product

Cyassl

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Yassl Cyassl	Up to 2.9.0
Yassl Cyassl	Version 0.2.0
Yassl Cyassl	Version 0.3.0
Yassl Cyassl	Version 0.4.0
Yassl Cyassl	Version 0.5.0
Yassl Cyassl	Version 0.5.5
Yassl Cyassl	Version 0.6.0
Yassl Cyassl	Version 0.6.2
Yassl Cyassl	Version 0.6.3
Yassl Cyassl	Version 0.8.0
Yassl Cyassl	Version 0.9.0
Yassl Cyassl	Version 0.9.6
Yassl Cyassl	Version 0.9.8
Yassl Cyassl	Version 0.9.9
Yassl Cyassl	Version 1.0.0 rc1
Yassl Cyassl	Version 1.0.0 rc2
Yassl Cyassl	Version 1.0.0 rc3
Yassl Cyassl	Version 1.0.2
Yassl Cyassl	Version 1.0.3
Yassl Cyassl	Version 1.0.6
Yassl Cyassl	Version 1.1.0
Yassl Cyassl	Version 1.2.0
Yassl Cyassl	Version 1.3.0
Yassl Cyassl	Version 1.4.0
Yassl Cyassl	Version 1.5.0
Yassl Cyassl	Version 1.5.4
Yassl Cyassl	Version 1.5.6
Yassl Cyassl	Version 1.6.0
Yassl Cyassl	Version 1.6.5
Yassl Cyassl	Version 1.8.0
Yassl Cyassl	Version 1.9.0
Yassl Cyassl	Version 2.0.0 rc1
Yassl Cyassl	Version 2.0.0 rc2
Yassl Cyassl	Version 2.0.0 rc3
Yassl Cyassl	Version 2.0.2
Yassl Cyassl	Version 2.0.6
Yassl Cyassl	Version 2.0.8
Yassl Cyassl	Version 2.2.0
Yassl Cyassl	Version 2.3.0
Yassl Cyassl	Version 2.4.0
Yassl Cyassl	Version 2.4.6
Yassl Cyassl	Version 2.5.0
Yassl Cyassl	Version 2.6.0
Yassl Cyassl	Version 2.7.0
Yassl Cyassl	Version 2.8.0