5.2.10. Vulnerabilities

5.2.10.1. [Critical] Potential heap buffer read overflow in Security Plugins when using a malicious identity certificate file

An out-of-bounds read on the heap could have occurred while processing a malicious identity certificate file. This problem did not affect the Security Plugins for wolfSSL.

User Impact without Security

Not applicable (affects a security-specific product/feature only).

User Impact with Security

A vulnerability in the Connext application could have resulted in the following:

• Heap buffer overread while processing a malicious identity certificate file.

• Exploitable by overwriting the identity certificate file on the file system with a malicious identity certificate file.

• Exploitable only when a race condition was won.

• Potential impact on confidentiality of Connext application.

• Potential crash of Connext application.

• CVSS v3.1 Base Score: 7.1 HIGH

• CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

• CVSS v4.0 Base Score: 5.8 MEDIUM

• CVSS v4.0 Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N

[RTI Issue ID SEC-2781]