CVE-2022-39173

In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message.

• CWE-787
• CWE-787

• http://packetstormsecurity.com/files/169600/wolfSSL-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2022/Oct/24Mailing List, Third Party Advisory
• https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/
• https://github.com/wolfSSL/wolfssl/releasesRelease Notes, Third Party Advisory
• https://www.wolfssl.com/docs/security-vulnerabilities/Vendor Advisory
• http://packetstormsecurity.com/files/169600/wolfSSL-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2022/Oct/24Mailing List, Third Party Advisory
• https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/
• https://github.com/wolfSSL/wolfssl/releasesRelease Notes, Third Party Advisory
• https://www.wolfssl.com/docs/security-vulnerabilities/Vendor Advisory

Published

Sep 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39166 IBM Security Guardium 11.4 could allow a privileged user to…4.9
• CVE-2022-39167 IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under …5.9
• CVE-2022-39168IBM Robotic Process Automation Clients are vulnerable to pro…7.5
• CVE-2022-3917Improper access control of bootloader function was discovere…5.5
• CVE-2022-39170libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr …8.8
• CVE-2022-39172A stored XSS in the process overview (bersicht zugewiesener …5.4
• CVE-2022-39176BlueZ before 5.59 allows physically proximate attackers to o…8.8
• CVE-2022-39177BlueZ before 5.59 allows physically proximate attackers to c…8.8
• CVE-2022-39178 Webvendome - webvendome Internal Server IP Disclosure. Send…5.3
• CVE-2022-39179 College Management System v1.0 - Authenticated remote code …7.2
• CVE-2022-3918A program using FoundationNetworking in swift-corelibs-found…8.8
• CVE-2022-39180 College Management System v1.0 - SQL Injection (SQLi). By i…9.8