wolfSSL Stack Buffer Overflow Vulnerability in ECH Support Allowing Remote Code Execution

A stack buffer overflow vulnerability has been identified in wolfSSL version 5.8.4, specifically within the Encrypted Client Hello (ECH) support. This vulnerability arises when a maliciously crafted ECH configuration is processed, potentially leading to remote code execution and causing the client program to crash. The issue can be exploited by a malicious TLS server that supports ECH. It is important to note that ECH is disabled by default and only enabled with the 'enable-ech' option.

Impact

Exploitation of this vulnerability could result in a stack buffer overflow, allowing for remote code execution on the client side, and causing a crash of the client program.