wolfSSL Packet Sniffer Integer Underflow Vulnerability in AEAD Decryption Path

An integer underflow vulnerability has been identified in wolfSSL packet sniffer versions through 5.9.0. This vulnerability allows an attacker to cause a program crash during AEAD decryption by injecting a TLS record that is shorter than the explicit IV plus authentication tag into traffic being inspected by ssl_DecodePacket. The underflow wraps a 16-bit length to a large value, which is then passed to AEAD decryption routines, resulting in a large out-of-bounds read and subsequent crash. This vulnerability can be triggered remotely by an unauthenticated attacker via malformed TLS Application Data records.

Impact

Exploitation of this vulnerability leads to a program crash due to a large out-of-bounds read in the AEAD decryption process.

Remediation

Users can update to wolfSSL version 5.9.1 or later, where this vulnerability has been addressed.