A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm or its size when checking Elliptic Curve Digital Signature Algorithm (ECDSA) signatures. [...]
Critical flaw in wolfSSL library enables forged certificate use
Résumé + lien vers la source. Sans paywall, sans tracking.