Cameron Hamilton-Rich axTLS through 2.1.5 Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) Vulnerability

Summary

Cameron Hamilton-Rich axTLS through 2.1.5 suffers from buffer copy without checking size of input (‘Classic Buffer Overflow’) vulnerability.

Credit:

The information has been provided by Vendor

The original article can be found at:https://seclists.org/bugtraq/2019/Nov/44


Details

Process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake message with zero certificates.

 

Vulnerable Systems:

Cameron Hamilton-Rich axTLS through 2.1.5

 

CVE Information:

CVE-2019-9689

 

Disclosure Timeline:
Published Date:12/3/2019

Categories: News