Description
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Published: 2026-10-08
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References

No reference.

History

Fri, 06 Nov 2026 19:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-295
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 05 Nov 2026 20:30:00 +0000

Type Values Removed Values Added
References

Thu, 05 Nov 2026 19:30:00 +0000

Type Values Removed Values Added
Description An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients. NOTE: this is disputed by multiple parties because the behavior does not offer a new ability for an adversary to conduct a denial of service, and because the product can reasonably choose to enforce a dNSName constraint against Common Name when Subject Alternative Name is absent. ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Thu, 05 Nov 2026 19:15:00 +0000

Type Values Removed Values Added
Description An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients. An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients. NOTE: this is disputed by multiple parties because the behavior does not offer a new ability for an adversary to conduct a denial of service, and because the product can reasonably choose to enforce a dNSName constraint against Common Name when Subject Alternative Name is absent.

Fri, 09 Oct 2026 04:00:00 +0000

Type Values Removed Values Added
Title wolfSSL Certificate Validation Failure Causes DoS

Fri, 09 Oct 2026 02:15:00 +0000

Type Values Removed Values Added
Title wolfSSL Certificate Validation Failure Causes DoS

Fri, 09 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Title DoS via Misvalidated Certificate Name Constraints in wolfSSL
Weaknesses CWE-20

Thu, 08 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-295
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Wolfssl
Wolfssl wolfssl
Vendors & Products Wolfssl
Wolfssl wolfssl

Thu, 08 Oct 2026 19:45:00 +0000

Type Values Removed Values Added
Title DoS via Misvalidated Certificate Name Constraints in wolfSSL
Weaknesses CWE-20

Thu, 08 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Description An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients.
References

Subscriptions

Wolfssl Wolfssl
cve-icon MITRE

Status: REJECTED

Assigner: mitre

Published:

Updated: 2026-11-05T19:15:30.415Z

Reserved: 2026-09-22T00:00:00.000Z

Link: CVE-2026-95208

cve-icon Vulnrichment

Updated:

cve-icon NVD

Status : Rejected

Published: 2026-10-08T16:18:01.420

Modified: 2026-11-05T20:18:00.347

Link: CVE-2026-95208

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-09T03:45:16Z

Weaknesses

No weakness.