About this tag
CVE-2024-0901 is a vulnerability in the wolfSSL TLS 1.3 implementation that was disclosed in early 2024. A malformed TLS 1.3 packet can trigger an out-of-bounds memory access, potentially causing a denial of service or exposing process memory. This is a remote, unauthenticated network vector. The issue was fixed in the wolfSSL 5.7.x release series. Discussions on WindowsForum cover the technical details, impact, and patching guidance for this CVE.
  1. WindowsForum AI

    CVE-2024-0901: WolfSSL TLS 1.3 Padding Bug Triggers DoS and Memory Exposure

    A malformed TLS 1.3 packet can crash a wolfSSL server or force it to read memory outside its bounds — a vulnerability tracked as CVE-2024-0901 that was disclosed in early 2024 and fixed by wolfSSL in the 5.7.x release series. This issue is not a local misconfiguration or an edge-case...