{"metadata": {"vulnerability": "CVE-2022-39173", "count": 27, "kinds": {"milestone": 6, "sighting": 4, "kev": 0, "other": 17}}, "data": [{"timestamp": "2022-09-02T00:00:00Z", "date_only": false, "value": "2022-09-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-39173", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-09-29T00:00:00Z", "date_only": true, "value": "2022-09-29", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-39173", "record": "GSD-2022-39173", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-09-29T00:00:00Z", "date_only": false, "value": "2022-09-29T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-39173", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-09-29T01:15:00Z", "date_only": false, "value": "2022-09-29T01:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WW6V-6X26-HGFC", "record": "GHSA-WW6V-6X26-HGFC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-09-29T01:15:00Z", "date_only": false, "value": "2022-09-29T01:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-39173", "record": "UBUNTU-CVE-2022-39173", "field": "published"}, {"timestamp": "2022-09-29T01:15:00Z", "date_only": false, "value": "2022-09-29T01:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-39173", "record": "GSD-2022-39173", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-09-29T01:15:11.373Z", "date_only": false, "value": "2022-09-29T01:15:11.373", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-39173", "record": "FKIE_CVE-2022-39173", "field": "published"}, {"timestamp": "2022-09-30T00:00:47Z", "date_only": false, "value": "2022-09-30T00:00:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WW6V-6X26-HGFC", "record": "GHSA-WW6V-6X26-HGFC", "field": "published"}, {"timestamp": "2023-01-17T10:37:08Z", "date_only": false, "value": "2023-01-17T10:37:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tech_b0lt_Genona/3521", "record": "CVE-2022-39173", "field": "creation_timestamp", "uuid": "44116930-7dc1-41e4-89db-8af36b921ae7", "content": "\u0412 \u0431\u043b\u043e\u0433\u0435 Trail of Bits \u0432\u044b\u0448\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \"Keeping the wolves out of wolfSSL\". \u0422\u0430\u043a \u043a\u0430\u043a \u0443 \u043c\u0435\u043d\u044f \u0431\u044b\u043b \u0443\u0436\u0435 \u043d\u0430 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e\u0441\u0442 \u043e \u0444\u0430\u0437\u0437\u0435\u0440\u0430\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u0442\u043e \u0434\u0443\u043c\u0430\u043b \u0437\u0430\u043a\u0438\u043d\u0443\u0442\u044c \u0441\u0442\u0430\u0442\u044c\u044e \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \"Someday\", \u043d\u043e \u0447\u0442\u043e-\u0442\u043e \u043f\u043e\u0432\u0435\u043b\u0435\u043b\u043e \u043c\u043d\u0435 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0435\u0451...\n\n\u041f\u043e \u0441\u0443\u0442\u0438 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u0444\u0430\u0437\u0437\u0435\u0440\u0435 tlspuffin \u043d\u0430 \u043c\u043e\u0434\u043d\u043e\u043c Rust. \u041d\u043e \u043e\u043d \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438 \u0435\u0433\u043e \u0446\u0435\u043b\u0438 \u044d\u0442\u043e \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b. tlspuffin \u0431\u0430\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0433\u0440\u043e\u0437 \u0414\u043e\u043b\u0435\u0432\u0430-\u042f\u043e \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043f\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c LibAFL (\u043d\u0430 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 tlspuffin). \u0414\u0430, \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 ProVerif \u0438 Tamarin, \u043d\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u0444\u0430\u0437\u0437\u0435\u0440 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0439\u0442\u0438 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u0438 \u0441\u043b\u043e\u0436\u043d\u043e \u0443\u043b\u043e\u0432\u0438\u043c\u044b\u0445 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f\u0445\n\n\u0414\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u0448\u0451\u043b, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 Trail of Bits \u0440\u0430\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-25640 and CVE-2022-25638 \u0432 wolfSSL, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043c\u043e\u0433 \u043d\u0430\u0439\u0442\u0438 \u043d\u043e\u0432\u044b\u0435 (\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0430 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0437\u0430\u043d\u044f\u043b \u043e\u043a\u043e\u043b\u043e \u0447\u0430\u0441\u0430 \u043d\u0430 \u043a\u0430\u0436\u0434\u0443\u044e \u0438\u0437 \u043d\u0438\u0445):\n\n- DOSC (Denial of service against clients): CVE-2022-38153\n- DOSS (Denial of service against servers): CVE-2022-38152\n- BUF: CVE-2022-39173\n- HEAP: CVE-2022-42905\n\n\u041a\u0430\u043a \u043f\u0438\u0448\u0435\u0442 \u0430\u0432\u0442\u043e\u0440, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0435\u0440\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0431\u0430\u0433\u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u043e\u043a\u043e\u043b\u043e 30 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u041d\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c, \u0442\u0430\u043a \u043a\u0430\u043a tlspuffin \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0438 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 GDB. \u041f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u0431\u0430\u0433\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435\u043a\u043e\u0435\u0433\u043e \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u0449\u0435\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438, \u0447\u0442\u043e \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438.\n\n\u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 tlspuffin \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u0445\u043e\u0442\u044f \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438. \u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443, \u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0443\u0448\u043b\u043e 5-6 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 SSH, \u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043e\u0434\u0438\u043d \u0440\u0430\u0437 \u044d\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u0435\u0440\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c. \u0422\u0430\u043a tlspuffin \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u043d\u0430\u0431\u043e\u0440\u043e\u0432, \u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u0435\u0441\u0442\u044b. \u0422\u043e \u0435\u0441\u0442\u044c \u043f\u043e \u0441\u0443\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c TLS-Attacker\n\n\u041a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u0440\u044b \u0432 \u0437\u0430\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438, TLS \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b, \u044d\u0442\u043e \u0442\u0430 \u043f\u043e\u0432\u0441\u0435\u0434\u043d\u0435\u0432\u043d\u0430\u044f \u0438 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u0430\u044f \u0432\u0435\u0449\u044c, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \"\u0434\u043e\u0432\u0435\u0440\u044f\u0435\u043c\" \u0438 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0451 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u0430\u044f \u0432\u0435\u0449\u044c", "url": "https://t.me/tech_b0lt_Genona/3521"}, {"timestamp": "2023-02-15T00:00:00Z", "date_only": false, "value": "2023-02-15T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-39173", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-02-15T22:15:00Z", "date_only": false, "value": "2023-02-15T22:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-39173", "record": "GSD-2022-39173", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": true, "value": "2023-08-08", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-39173", "record": "GSD-2022-39173", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-08-31T12:15:22.514Z", "date_only": false, "value": "2023-08-31T12:15:22.514335Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-39173", "record": "BELL-CVE-2022-39173", "field": "published"}, {"timestamp": "2023-08-31T12:15:22.514Z", "date_only": false, "value": "2023-08-31T12:15:22.514338Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-39173", "record": "BELL-CVE-2022-39173", "field": "modified"}, {"timestamp": "2023-08-31T12:15:22.514Z", "date_only": false, "value": "2023-08-31T12:15:22.514338Z", "kind": "other", "label": "Withdrawn", "source": "osv_bellsoft \u00b7 BELL-CVE-2022-39173", "record": "BELL-CVE-2022-39173", "field": "withdrawn"}, {"timestamp": "2023-12-13T01:19:21.036Z", "date_only": false, "value": "2023-12-13T01:19:21.036238Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-39173", "record": "GSD-2022-39173", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-26T15:34:45Z", "date_only": false, "value": "2024-01-26T15:34:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2986", "record": "CVE-2022-39173", "field": "creation_timestamp", "uuid": "3f945d6b-cd81-4b20-a2cf-c5984a3170f1", "content": "#ExploitObserverAlert\n\nCVE-2022-39173\n\nDESCRIPTION: Exploit Observer has 7 entries in 4 file formats related to CVE-2022-39173. In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent: one in the resumed session, and a second one as a response to a Hello Retry Request message.\n\nFIRST-EPSS: 0.003080000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/2986"}, {"timestamp": "2024-08-03T12:00:42.475Z", "date_only": false, "value": "2024-08-03T12:00:42.475Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-39173", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-20T19:43:15.635Z", "date_only": false, "value": "2025-05-20T19:43:15.635175Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-39173", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-20T19:43:15.635Z", "date_only": false, "value": "2025-05-20T19:43:15.635175Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-39173", "record": "FKIE_CVE-2022-39173", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-20T19:43:18.920Z", "date_only": false, "value": "2025-05-20T19:43:18.920Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-39173", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-20T19:43:18.920Z", "date_only": false, "value": "2025-05-20T19:43:18.920Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-39173", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-20T21:30:26Z", "date_only": false, "value": "2025-05-20T21:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WW6V-6X26-HGFC", "record": "GHSA-WW6V-6X26-HGFC", "field": "modified"}, {"timestamp": "2026-06-17T04:57:51.080Z", "date_only": false, "value": "2026-06-17T04:57:51.080", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-39173", "record": "FKIE_CVE-2022-39173", "field": "lastModified"}, {"timestamp": "2026-09-01T20:01:19.330Z", "date_only": false, "value": "2026-09-01T20:01:19.330867Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/74858", "record": "CVE-2022-39173", "field": "creation_timestamp", "uuid": "675f22e7-f8b4-4d15-b777-9454c5916106", "content": "Exploit Collector\nwolfSSL Buffer Overflow\n\nhttps://4.bp.blogspot.com/-yT3eHciMBDw/WWlvGfUXh9I/AAAAAAAAILU/lYidSj08G0suEfC69x80tZFrj-NYN5F9wCLcBGAs/s1600/h137.png In wolfSSL versions prior to 5.5.1, malicious clients can cause a buffer overflow during a resumed TLS 1.3 handshake. If an attacker resumes a previous TLS session by sending a maliciously crafted Client Hello, followed by another maliciously crafted Client Hello. In total 2 Client Hellos have to be sent. One which pretends to resume a previous session and a second one as a response to a Hello Retry Request message.\n\nSHA-256 | dc47311c0e4409688cd698016d1b6ec4010bff4dbccd63241e107b8a91774b58Download # wolfssl before 5.5.1: CVE-2022-39173 Buffer overflow when refining\ncipher suites\n==================================================================================\n## INFO\n=======\n\nThe CVE project has assigned the id CVE-2022-39173 to this issue.\n\nSeverity: high 7.5\nAffected version: before 5.5.1\nEnd of embargo: The embargo for this vulnerability ended 29th of September, 2022\n## SUMMARY\n==========\n\nIn wolfSSL before 5.5.1 malicious clients can cause a buffer-overflow\nduring a resumed TLS 1.3 handshake. If an attacker resumes a previous\nTLS session by sending a maliciously crafted Client Hello, followed by\nanother maliciously crafted Client Hello. In total 2 Client Hellos\nhave to be sent. One which pretends to resume a previous session and a\nsecond one as a response to a Hello Retry Request message.\n\nThe malicious Client Hellos contain a list of supported cipher suites,\nwhich contain at least `\u230asqrt(150)\u230b + 1 = 13` duplicates and less than\n150 ciphers in total. The buffer-overflow occurs in the `RefineSuites`\nfunction. An overflow of 44700 bytes has been confirmed. Therefore,\nlarge portions of the stack can get overwritten, including return\naddresses.\n\nWe confirmed the vulnerability by sending packets over TCP to a\nWolfssl server, freshly built from the sources with the\n`--enable-session-ticket` flags (or simply `--enable-all`). We can\nprovide sources for our software (tlspuffin) that produce those\npackets (and that automatically found the attack trace). The command\ngiven at the end of this document triggers the buffer overflow.\n\nIt is very likely that there is a way to craft an exploit which can\ncause a RCE. We have not yet created such an exploit as it would\nlikely depend on the memory layout of the binary which uses wolfSSL.\n\nMoreover, the size of the overflow can be fine-tuned in order to not\nsmash the stack and continue the execution with a too large length of\nsuites buffer and that will cause other routines that iterate over\nthus buffer (e.g., `FindSuiteSSL`) to misbehave. Hypothetically, this\nmight be exploited to make the server use a cipher it should not\naccept such as `nullcipher` that would open up new attack vectors such\nas downgrade attacks.\nWhile this has not been confirmed yet, the buffer overflow itself has\nbeen confirmed.\n## DETAILS\n==========\n\nLine numbers below are valid for the wolfSSL Git tag\n[v5.4.0-stable](https://github.com/wolfSSL/wolfssl/tree/v5.4.0-stable).\n\nThe bug we found is in the `RefineSuites` function. In the following\nwe want to explain why the function is able to overflow the `suites`\narray.\n```c\n/* Refine list of supported cipher suites to those common to server and client.\n*\n* ssl         SSL/TLS object.\n* peerSuites  The peer's advertised list of supported cipher suites.\n*/\nstatic void RefineSuites(WOLFSSL* ssl, Suites* peerSuites)\n{\nbyte   suites[WOLFSSL_MAX_SUITE_SZ];\nword16 suiteSz = 0;\nword16 i, j;\n\nXMEMSET(suites, 0, WOLFSSL_MAX_SUITE_SZ);\n\nfor (i = 0; i < ssl->suites->suiteSz; i += 2) {\nfor (j = 0; j < peerSuites->suiteSz; j += 2) {\nif (ssl->suites->suites[i+0] == peerSuites->suites[j+0] &&\nssl->suites->suites[i+1] == peerSuites->suites[j+1]) {\nsuites[suiteSz++] = peerSuites->suites[j+0];\nsuites[suiteSz++] = peerSuites->suites[j+1];\n}\n}\n}\n\nssl->suites->suiteSz = suiteSz;\nXMEMCPY(ssl->suites->suites, &suites, sizeof(suites));\n#ifdef WOLFSSL_DEBUG_TLS\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/74858"}, {"timestamp": "2026-09-05T05:00:04.518Z", "date_only": false, "value": "2026-09-05T05:00:04.518511Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/74858", "record": "CVE-2022-39173", "field": "creation_timestamp", "uuid": "52d9e947-79e2-489c-9d3f-e1991249c786", "content": "Exploit Collector\nwolfSSL Buffer Overflow\n\nhttps://4.bp.blogspot.com/-yT3eHciMBDw/WWlvGfUXh9I/AAAAAAAAILU/lYidSj08G0suEfC69x80tZFrj-NYN5F9wCLcBGAs/s1600/h137.png In wolfSSL versions prior to 5.5.1, malicious clients can cause a buffer overflow during a resumed TLS 1.3 handshake. If an attacker resumes a previous TLS session by sending a maliciously crafted Client Hello, followed by another maliciously crafted Client Hello. In total 2 Client Hellos have to be sent. One which pretends to resume a previous session and a second one as a response to a Hello Retry Request message.\n\nSHA-256 | dc47311c0e4409688cd698016d1b6ec4010bff4dbccd63241e107b8a91774b58Download # wolfssl before 5.5.1: CVE-2022-39173 Buffer overflow when refining\ncipher suites\n==================================================================================\n## INFO\n=======\n\nThe CVE project has assigned the id CVE-2022-39173 to this issue.\n\nSeverity: high 7.5\nAffected version: before 5.5.1\nEnd of embargo: The embargo for this vulnerability ended 29th of September, 2022\n## SUMMARY\n==========\n\nIn wolfSSL before 5.5.1 malicious clients can cause a buffer-overflow\nduring a resumed TLS 1.3 handshake. If an attacker resumes a previous\nTLS session by sending a maliciously crafted Client Hello, followed by\nanother maliciously crafted Client Hello. In total 2 Client Hellos\nhave to be sent. One which pretends to resume a previous session and a\nsecond one as a response to a Hello Retry Request message.\n\nThe malicious Client Hellos contain a list of supported cipher suites,\nwhich contain at least `\u230asqrt(150)\u230b + 1 = 13` duplicates and less than\n150 ciphers in total. The buffer-overflow occurs in the `RefineSuites`\nfunction. An overflow of 44700 bytes has been confirmed. Therefore,\nlarge portions of the stack can get overwritten, including return\naddresses.\n\nWe confirmed the vulnerability by sending packets over TCP to a\nWolfssl server, freshly built from the sources with the\n`--enable-session-ticket` flags (or simply `--enable-all`). We can\nprovide sources for our software (tlspuffin) that produce those\npackets (and that automatically found the attack trace). The command\ngiven at the end of this document triggers the buffer overflow.\n\nIt is very likely that there is a way to craft an exploit which can\ncause a RCE. We have not yet created such an exploit as it would\nlikely depend on the memory layout of the binary which uses wolfSSL.\n\nMoreover, the size of the overflow can be fine-tuned in order to not\nsmash the stack and continue the execution with a too large length of\nsuites buffer and that will cause other routines that iterate over\nthus buffer (e.g., `FindSuiteSSL`) to misbehave. Hypothetically, this\nmight be exploited to make the server use a cipher it should not\naccept such as `nullcipher` that would open up new attack vectors such\nas downgrade attacks.\nWhile this has not been confirmed yet, the buffer overflow itself has\nbeen confirmed.\n## DETAILS\n==========\n\nLine numbers below are valid for the wolfSSL Git tag\n[v5.4.0-stable](https://github.com/wolfSSL/wolfssl/tree/v5.4.0-stable).\n\nThe bug we found is in the `RefineSuites` function. In the following\nwe want to explain why the function is able to overflow the `suites`\narray.\n```c\n/* Refine list of supported cipher suites to those common to server and client.\n*\n* ssl         SSL/TLS object.\n* peerSuites  The peer's advertised list of supported cipher suites.\n*/\nstatic void RefineSuites(WOLFSSL* ssl, Suites* peerSuites)\n{\nbyte   suites[WOLFSSL_MAX_SUITE_SZ];\nword16 suiteSz = 0;\nword16 i, j;\n\nXMEMSET(suites, 0, WOLFSSL_MAX_SUITE_SZ);\n\nfor (i = 0; i < ssl->suites->suiteSz; i += 2) {\nfor (j = 0; j < peerSuites->suiteSz; j += 2) {\nif (ssl->suites->suites[i+0] == peerSuites->suites[j+0] &&\nssl->suites->suites[i+1] == peerSuites->suites[j+1]) {\nsuites[suiteSz++] = peerSuites->suites[j+0];\nsuites[suiteSz++] = peerSuites->suites[j+1];\n}\n}\n}\n\nssl->suites->suiteSz = suiteSz;\nXMEMCPY(ssl->suites->suites, &suites, sizeof(suites));\n#ifdef WOLFSSL_DEBUG_TLS\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/74858"}, {"timestamp": "2026-10-17T09:11:01Z", "date_only": false, "value": "2026-10-17T09:11:01Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-39173", "record": "UBUNTU-CVE-2022-39173", "field": "modified"}]}