---
id: 1708
title: "Keeping the wolves out of wolfSSL"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/"
published_at: "2023-01-12T13:00:17Z"
tags: ["fuzzing", "cryptography", "tls", "vulnerability-disclosure", "dos"]
phying_url: "https://phying.com/item/1708"
lang: en
---

# Keeping the wolves out of wolfSSL

## Summary

Trail of Bits discloses four wolfSSL vulnerabilities (CVE-2022-38152, CVE-2022-38153, CVE-2022-39173, CVE-2022-42905) discovered automatically with tlspuffin, a Dolev-Yao model-guided protocol fuzzer. All four can cause denial of service, with CVSS scores from medium to critical.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2023-01-12T13:00:17Z
- **Original:** https://blog.trailofbits.com/2023/01/12/wolfssl-vulnerabilities-tlspuffin-fuzzing-ssh/
- **Phying News:** https://phying.com/item/1708