CVE-2021-44718

Published: Sep 2, 2022Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle (MITM) position. The root cause is that the client module accepts TLS messages that normally are only sent to TLS servers.

Affected (1)

Products: Wolfssl: Wolfssl

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wolfssl Wolfssl	Up to 5.0.0

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (4)

https://github.com/wolfSSL/wolfssl/releases

Source: cve@mitre.org

Release NotesThird Party Advisory

https://www.wolfssl.com/docs/security-vulnerabilities/

Source: cve@mitre.org

Vendor Advisory

https://github.com/wolfSSL/wolfssl/releases

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://www.wolfssl.com/docs/security-vulnerabilities/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.