wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for
    return-routability can be skipped. (CVE-2022-34293)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for     return-routability can be skipped. (CVE-2022-34293)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9b9a5f6e-1755-11ed-adef-589cfc01894a advisory.

  - AMD EPYC Processors contain an information disclosure vulnerability in the Secure Encrypted     Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging     (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking     guest data by the malicious hypervisor. (CVE-2020-12966)

  - An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on     AMD CPUs by monitoring ciphertext values over time. (CVE-2021-46744)

  - wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for     return-routability can be skipped. (CVE-2022-34293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
426547	Alpine: multiple wolfssl packages: security update to 5.4.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426547	Alpine: multiple wolfssl packages: security update to 5.4.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
224756	Linux Distros Unpatched Vulnerability : CVE-2022-34293	Nessus	Misc.	high
163920	FreeBSD : wolfssl -- multiple issues (9b9a5f6e-1755-11ed-adef-589cfc01894a)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2022-34293

high

Tenable Plugins

high

high

high

medium