In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509_check_host() takes in a pointer and length to check against, with no requirements that it be NULL terminated. If a caller was attempting to do a name check on a non-NULL terminated buffer, the code would read beyond the bounds of the input array until it found a NULL terminator.This issue affects wolfSSL: through 5.7.0.
The MatchDomainName() function treats the passed str parameter as a NULL-terminated string, even though this data is supplied by the user and is not validated. The X509_check_host() function accepts a pointer and buffer length without requiring NULL termination. If the caller passes a buffer that is not NULL-terminated, the code will read memory beyond the input array boundaries until it encounters such a character. This leads to a classic CWE-125 vulnerability — out-of-bounds read.
An attacker can trigger a read operation from outside the permitted memory area, which may reveal sensitive information or in extreme cases lead to application instability. Considering the maximum CVSS score of 10.0, the vulnerability may have a critical impact on system confidentiality, integrity, and availability.
Update the WolfSSL library to a version containing the patch available in pull request #7604 in the project repository on GitHub. If updating is not possible, ensure that all data passed to the X509_check_host() function is properly NULL-terminated on the caller's side.
WolfSSL in all versions up to and including 5.7.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XWolfssl
APPWolfssl≤ 5.7.0
Related vulnerabilities
WolfSSL: nieprawidłowa weryfikacja rozmiaru skrótu w certyfikatach ECDSA
WolfSSL TLS 1.3: przewidywalny klucz sesji przez brak PSK/KSE
wolfSSL: heap buffer over-read przy włączonej fladze WOLFSSL_CALLBACKS
wolfSSL: nielosowe wartości IV w połączeniach TLS/DTLS (AES-CBC, DES3)
wolfSSL: brak weryfikacji numeru seryjnego w odpowiedzi OCSP