CVE-2021-38597

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension

published August 12, 2021

CVSS
—
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00483 · 40.7th percentile
Published
2021-08-12T14:26Z
EPSS history
Timeline
  • 12 AUG 14:26Z
    wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension
    cvelistv5