CVE-2019-8981

EUVD-2019-18368
tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Affected Products (NVD)
VendorProductVersion
axtls_projectaxtls
𝑥
< 2.1.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://axtls.sourceforge.net
https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842
https://www.telekom.com/resource/blob/566546/276aaa2eab781729f2544d62edecf002/dl-190322-remote-buffer-overflow-in-a-axtls-data.pdf
http://axtls.sourceforge.net
https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842
https://www.telekom.com/resource/blob/566546/276aaa2eab781729f2544d62edecf002/dl-190322-remote-buffer-overflow-in-a-axtls-data.pdf