Vulnerabilities
===============

.. Release Notes from this point.

:critical:`[Critical]` Potential heap buffer read overflow in Security Plugins when using a malicious identity certificate file
-------------------------------------------------------------------------------------------------------------------------------
An out-of-bounds read on the heap could have occurred while processing a
malicious identity certificate file. This problem did not affect the
*Security Plugins* for wolfSSL.


.. rubric:: User Impact without Security

Not applicable (affects a security-specific product/feature only).


.. rubric:: User Impact with Security

A vulnerability in the *Connext* application could have resulted in the
following:

- Heap buffer overread while processing a malicious identity certificate
  file.

- Exploitable by overwriting the identity certificate file on the file
  system with a malicious identity certificate file.

- Exploitable only when a race condition was won.

- Potential impact on confidentiality of *Connext* application.

- Potential crash of *Connext* application.

- CVSS v3.1 Base Score: 7.1 HIGH

- CVSS v3.1 Vector:
  `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H <https://www.first.org/cvss/calculator/3-1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H>`__

- CVSS v4.0 Base Score: 5.8 MEDIUM

- CVSS v4.0 Vector:
  `CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N <https://www.first.org/cvss/calculator/4-0#CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N>`__

[RTI Issue ID SEC-2781]
