CVE-2019-8981 - tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged

Back Back to CVE browser

CRITICAL

tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged

Published Mar 26, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 2.68%

Description

tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

http://axtls.sourceforge.net
x_refsource_MISCProductThird Party Advisory
https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842
x_refsource_MISCPatchThird Party Advisory
https://www.telekom.com/resource/blob/566546/276aaa2eab781729f2544d62edecf002/dl-190322-remote-buffer-overflow-in-a-axtls-data.pdf
x_refsource_MISCExploitPatchThird Party Advisory

Link	Providers	Tags
http://axtls.sourceforge.net		x_refsource_MISCProductThird Party Advisory
https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842		x_refsource_MISCPatchThird Party Advisory
https://www.telekom.com/resource/blob/566546/276aaa2eab781729f2544d62edecf002/dl-190322-remote-buffer-overflow-in-a-axtls-data.pdf		x_refsource_MISCExploitPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 26, 2019

Updated Aug 4, 2024

Reserved Feb 21, 2019

Link CVE-2019-8981

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-8981

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-8981