In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wolfssl | Ubuntu | bionic | * |
| Wolfssl | Ubuntu | lunar | * |
| Wolfssl | Ubuntu | mantic | * |
| Wolfssl | Ubuntu | trusty | * |
| Wolfssl | Ubuntu | upstream | * |
| Wolfssl | Ubuntu | xenial | * |