CVE-2014-2898

wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verification failure.

• CWE-125

• http://seclists.org/oss-sec/2014/q2/126Mailing List, Third Party Advisory
• http://seclists.org/oss-sec/2014/q2/130Mailing List, Third Party Advisory
• http://www.wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.htmlVendor Advisory
• http://www.wolfssl.com/yaSSL/Docs-cyassl-changelog.htmlVendor Advisory
• http://seclists.org/oss-sec/2014/q2/126Mailing List, Third Party Advisory
• http://seclists.org/oss-sec/2014/q2/130Mailing List, Third Party Advisory
• http://www.wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.htmlVendor Advisory
• http://www.wolfssl.com/yaSSL/Docs-cyassl-changelog.htmlVendor Advisory

Published

Jan 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2892Heap-based buffer overflow in the get_answer function in mms…
• CVE-2014-2893The GetHTMLRunDir function in the scan-build utility in Clan…
• CVE-2014-2894Off-by-one error in the cmd_smart function in the smart self…
• CVE-2014-2895Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-2896The DoAlert function in the (1) TLS and (2) DTLS implementat…9.8
• CVE-2014-2897The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before …9.8
• CVE-2014-2899wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause…
• CVE-2014-2900wolfSSL CyaSSL before 2.9.4 does not properly validate X.509…
• CVE-2014-2901wolfssl before 3.2.0 does not properly issue certificates fo…7.5
• CVE-2014-2902wolfssl before 3.2.0 does not properly authorize CA certific…7.5
• CVE-2014-2903CyaSSL does not check the key usage extension in leaf certif…
• CVE-2014-2904wolfssl before 3.2.0 has a server certificate that is not pr…7.5