{"vulnerability": "CVE-2022-38152", "sightings": [{"uuid": "cda22aff-d61b-4ea3-bae3-e21009dbdf7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38152", "type": "seen", "source": "https://t.me/tech_b0lt_Genona/3521", "content": "\u0412 \u0431\u043b\u043e\u0433\u0435 Trail of Bits \u0432\u044b\u0448\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \"Keeping the wolves out of wolfSSL\". \u0422\u0430\u043a \u043a\u0430\u043a \u0443 \u043c\u0435\u043d\u044f \u0431\u044b\u043b \u0443\u0436\u0435 \u043d\u0430 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e\u0441\u0442 \u043e \u0444\u0430\u0437\u0437\u0435\u0440\u0430\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u0442\u043e \u0434\u0443\u043c\u0430\u043b \u0437\u0430\u043a\u0438\u043d\u0443\u0442\u044c \u0441\u0442\u0430\u0442\u044c\u044e \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \"Someday\", \u043d\u043e \u0447\u0442\u043e-\u0442\u043e \u043f\u043e\u0432\u0435\u043b\u0435\u043b\u043e \u043c\u043d\u0435 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0435\u0451...\n\n\u041f\u043e \u0441\u0443\u0442\u0438 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e \u043d\u043e\u0432\u043e\u043c \u0444\u0430\u0437\u0437\u0435\u0440\u0435 tlspuffin \u043d\u0430 \u043c\u043e\u0434\u043d\u043e\u043c Rust. \u041d\u043e \u043e\u043d \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438 \u0435\u0433\u043e \u0446\u0435\u043b\u0438 \u044d\u0442\u043e \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b. tlspuffin \u0431\u0430\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0433\u0440\u043e\u0437 \u0414\u043e\u043b\u0435\u0432\u0430-\u042f\u043e \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043f\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c LibAFL (\u043d\u0430 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 tlspuffin). \u0414\u0430, \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 ProVerif \u0438 Tamarin, \u043d\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u0444\u0430\u0437\u0437\u0435\u0440 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0439\u0442\u0438 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u0438 \u0441\u043b\u043e\u0436\u043d\u043e \u0443\u043b\u043e\u0432\u0438\u043c\u044b\u0445 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f\u0445\n\n\u0414\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u0448\u0451\u043b, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 Trail of Bits \u0440\u0430\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-25640 and CVE-2022-25638 \u0432 wolfSSL, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043c\u043e\u0433 \u043d\u0430\u0439\u0442\u0438 \u043d\u043e\u0432\u044b\u0435 (\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0430 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0437\u0430\u043d\u044f\u043b \u043e\u043a\u043e\u043b\u043e \u0447\u0430\u0441\u0430 \u043d\u0430 \u043a\u0430\u0436\u0434\u0443\u044e \u0438\u0437 \u043d\u0438\u0445):\n\n- DOSC (Denial of service against clients): CVE-2022-38153\n- DOSS (Denial of service against servers): CVE-2022-38152\n- BUF: CVE-2022-39173\n- HEAP: CVE-2022-42905\n\n\u041a\u0430\u043a \u043f\u0438\u0448\u0435\u0442 \u0430\u0432\u0442\u043e\u0440, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0435\u0440\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0431\u0430\u0433\u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u043e\u043a\u043e\u043b\u043e 30 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u041d\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c, \u0442\u0430\u043a \u043a\u0430\u043a tlspuffin \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0438 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 GDB. \u041f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u0431\u0430\u0433\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435\u043a\u043e\u0435\u0433\u043e \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u0449\u0435\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438, \u0447\u0442\u043e \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438.\n\n\u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 tlspuffin \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u0445\u043e\u0442\u044f \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438. \u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443, \u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0443\u0448\u043b\u043e 5-6 \u043d\u0435\u0434\u0435\u043b\u044c \u043d\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 SSH, \u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043e\u0434\u0438\u043d \u0440\u0430\u0437 \u044d\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u0435\u0440\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c. \u0422\u0430\u043a tlspuffin \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u043d\u0430\u0431\u043e\u0440\u043e\u0432, \u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u0435\u0441\u0442\u044b. \u0422\u043e \u0435\u0441\u0442\u044c \u043f\u043e \u0441\u0443\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c TLS-Attacker\n\n\u041a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u0440\u044b \u0432 \u0437\u0430\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438, TLS \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b, \u044d\u0442\u043e \u0442\u0430 \u043f\u043e\u0432\u0441\u0435\u0434\u043d\u0435\u0432\u043d\u0430\u044f \u0438 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u0430\u044f \u0432\u0435\u0449\u044c, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \"\u0434\u043e\u0432\u0435\u0440\u044f\u0435\u043c\" \u0438 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0451 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u0430\u044f \u0432\u0435\u0449\u044c", "creation_timestamp": "2023-01-17T10:37:08.000000Z"}, {"uuid": "41592476-f19c-41c7-85d9-c3a3530a4a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38152", "type": "seen", "source": "https://t.me/arpsyndicate/3095", "content": "#ExploitObserverAlert\n\nCVE-2022-38152\n\nDESCRIPTION: Exploit Observer has 7 entries in 5 file formats related to CVE-2022-38152. An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation fault. This occurs in the second session, which is created through TLS session resumption and reuses the initial struct WOLFSSL. If the server reuses the previous session structure (struct WOLFSSL) by calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello (that resumes the previous session) crashes the server. Note that this bug is only triggered when resuming sessions using TLS session resumption. Only servers that use wolfSSL_clear instead of the recommended SSL_free; SSL_new sequence are affected. Furthermore, wolfSSL_clear is part of wolfSSL's compatibility layer and is not enabled by default. It is not part of wolfSSL's native API.\n\nFIRST-EPSS: 0.002470000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-26T22:22:25.000000Z"}, {"uuid": "f75f4863-3106-4137-b2b8-7e6583784c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38152", "type": "seen", "source": "https://t.me/cibsecurity/49133", "content": "\u203c CVE-2022-38152 \u203c\n\nAn issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation fault. This occurs in the second session, which is created through TLS session resumption and reuses the initial struct WOLFSSL. If the server reuses the previous session structure (struct WOLFSSL) by calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello (that resumes the previous session) crashes the server. Note that this bug is only triggered when resuming sessions using TLS session resumption. Only servers that use wolfSSL_clear instead of the recommended SSL_free; SSL_new sequence are affected. Furthermore, wolfSSL_clear is part of wolfSSL's compatibility layer and is not enabled by default. It is not part of wolfSSL's native API.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-31T20:43:08.000000Z"}, {"uuid": "cd11fd17-0ab5-429d-b681-a6e822059543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38152", "type": "seen", "source": "https://t.me/hacking_Attack/86304", "content": "Exploit Collector\nwolfSSL Session Resumption Denial Of Service\n\nhttps://4.bp.blogspot.com/-1sVwQJsRVpo/WWlvgaUDftI/AAAAAAAAIQM/9m_QfduSdAQi14Fs6kLQe2-YLO5Bx1iKQCLcBGAs/s1600/h87.png wolfSSL versions prior to 5.5.0 suffer from a denial of service condition related to session resumption. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation fault. The bug occurs after a client performs a handshake against a wolfSSL server and then closes the connection. If the server reuses the previous session structure (struct WOLFSSL) by calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello, which resumes the previous session, crashes the server. Note, that this bug only exists in resumed handshakes using TLS session resumption. This bug was discovered using the novel symbolic-model-guided fuzzer tlspuffin.\n\nSHA-256 | 1b9325efbf39604c8462f0298d0d79f674ddf2937457ea4559d7da387dd41a30Download # wolfSSL before 5.5.0: Denial-of-service with session resumption\n=================================================================\n\n## INFO\n=======\n\nThe CVE project has assigned the id CVE-2022-38152 to this issue.\n\nSeverity: 7.5 HIGH\nAffected version: before 5.5.0\nEnd of embargo: Ended August 30, 2022\n\n## SUMMARY\n==========\n\nWhen a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on\nits session, the server crashes with a segmentation fault. The bug occurs after\na client performs a handshake against a wolfSSL server and then closes the\nconnection. If the server reuses the previous session structure (struct WOLFSSL)\nby calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello,\nwhich resumes the previous session, crashes the server. Note, that this bug only\nexists in resumed handshakes using TLS session resumption. This bug was\ndiscovered using the novel symbolic-model-guided fuzzer tlspuffin.\n\n## DETAILS\n==========\n\nLine numbers below are valid for the wolfSSL Git tag v5.4.0-stable. The\nvulnerability is exploitable with default compilation flags. If the\n--enable-postauth flag is used, then this bug is no longer exploitable. When\ncreating a new TLS session (represented by a struct WOLFSSL), a struct called\narrays is allocated in internal.c:6652.\n\n```\nint InitSSL(WOLFSSL* ssl, WOLFSSL_CTX* ctx, int writeDup)\n{\n...\nssl->arrays = (Arrays*)XMALLOC(sizeof(Arrays), ssl->heap,\nDYNAMIC_TYPE_ARRAYS);\n...\n}\n```\n\nNote that this function is only called when creating a new session structure\nusing wolfSSL_new. After a handshake is done, resources related to it are freed\nby default using the FreeHandshakeResources function in line ssl.c:3735. This\nfrees the memory behind ssl->arrays and sets the pointer to NULL.\n\n```\nvoid FreeHandshakeResources(WOLFSSL* ssl)\n{\n...\nif (!ssl->options.tls1_3)\nFreeArrays(ssl)\n...\n}\n\nvoid FreeArrays(WOLFSSL* ssl)\n{\n...\nssl->arrays = NULL;\n}\n```\n\nIf the compile flag --enable-postauth is not set, the variable options.tls1_3 is\nfalse, and therefore the arrays are freed. If --enable-postauth is set, then the\narrays are not freed. The above code is executed during the handshake of a fresh\nsession. Users of wolfSSL might not allocate a new session by using\nwolfSSL_new(), but reuse a previous struct WOLFSSL. This can be done by calling\nwolfSSL_clear(WOLFSSL* ssl) on the previous session and reusing the struct. The\nnext abbreviated handshake, which resumes the previous connection, will now\ncause a segmentation fault in tls13.c:5296.  The segmentation fault occurs\nbecause the arrays pointer still points to NULL as InitSSL is not called before\nthe Client Hello is handled.\n\n## AFFECTED VERSIONS\n====================\n\nwolfSSL 5.3.0 and 5.4.0 are affected The server needs to handle sessions in a\nnon-default way by using wolfSSL_clear\n\n## SUGGESTED REMEDIATION\n========================\n\nAfter a session has been cleared and is reused for the next client, it should be\nreinitialized. Source:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:05.849637Z"}, {"uuid": "e55e9609-456d-4ad1-a8b2-acf9b2861bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38152", "type": "seen", "source": "https://t.me/hacking_Attack/86304", "content": "Exploit Collector\nwolfSSL Session Resumption Denial Of Service\n\nhttps://4.bp.blogspot.com/-1sVwQJsRVpo/WWlvgaUDftI/AAAAAAAAIQM/9m_QfduSdAQi14Fs6kLQe2-YLO5Bx1iKQCLcBGAs/s1600/h87.png wolfSSL versions prior to 5.5.0 suffer from a denial of service condition related to session resumption. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation fault. The bug occurs after a client performs a handshake against a wolfSSL server and then closes the connection. If the server reuses the previous session structure (struct WOLFSSL) by calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello, which resumes the previous session, crashes the server. Note, that this bug only exists in resumed handshakes using TLS session resumption. This bug was discovered using the novel symbolic-model-guided fuzzer tlspuffin.\n\nSHA-256 | 1b9325efbf39604c8462f0298d0d79f674ddf2937457ea4559d7da387dd41a30Download # wolfSSL before 5.5.0: Denial-of-service with session resumption\n=================================================================\n\n## INFO\n=======\n\nThe CVE project has assigned the id CVE-2022-38152 to this issue.\n\nSeverity: 7.5 HIGH\nAffected version: before 5.5.0\nEnd of embargo: Ended August 30, 2022\n\n## SUMMARY\n==========\n\nWhen a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on\nits session, the server crashes with a segmentation fault. The bug occurs after\na client performs a handshake against a wolfSSL server and then closes the\nconnection. If the server reuses the previous session structure (struct WOLFSSL)\nby calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello,\nwhich resumes the previous session, crashes the server. Note, that this bug only\nexists in resumed handshakes using TLS session resumption. This bug was\ndiscovered using the novel symbolic-model-guided fuzzer tlspuffin.\n\n## DETAILS\n==========\n\nLine numbers below are valid for the wolfSSL Git tag v5.4.0-stable. The\nvulnerability is exploitable with default compilation flags. If the\n--enable-postauth flag is used, then this bug is no longer exploitable. When\ncreating a new TLS session (represented by a struct WOLFSSL), a struct called\narrays is allocated in internal.c:6652.\n\n```\nint InitSSL(WOLFSSL* ssl, WOLFSSL_CTX* ctx, int writeDup)\n{\n...\nssl->arrays = (Arrays*)XMALLOC(sizeof(Arrays), ssl->heap,\nDYNAMIC_TYPE_ARRAYS);\n...\n}\n```\n\nNote that this function is only called when creating a new session structure\nusing wolfSSL_new. After a handshake is done, resources related to it are freed\nby default using the FreeHandshakeResources function in line ssl.c:3735. This\nfrees the memory behind ssl->arrays and sets the pointer to NULL.\n\n```\nvoid FreeHandshakeResources(WOLFSSL* ssl)\n{\n...\nif (!ssl->options.tls1_3)\nFreeArrays(ssl)\n...\n}\n\nvoid FreeArrays(WOLFSSL* ssl)\n{\n...\nssl->arrays = NULL;\n}\n```\n\nIf the compile flag --enable-postauth is not set, the variable options.tls1_3 is\nfalse, and therefore the arrays are freed. If --enable-postauth is set, then the\narrays are not freed. The above code is executed during the handshake of a fresh\nsession. Users of wolfSSL might not allocate a new session by using\nwolfSSL_new(), but reuse a previous struct WOLFSSL. This can be done by calling\nwolfSSL_clear(WOLFSSL* ssl) on the previous session and reusing the struct. The\nnext abbreviated handshake, which resumes the previous connection, will now\ncause a segmentation fault in tls13.c:5296.  The segmentation fault occurs\nbecause the arrays pointer still points to NULL as InitSSL is not called before\nthe Client Hello is handled.\n\n## AFFECTED VERSIONS\n====================\n\nwolfSSL 5.3.0 and 5.4.0 are affected The server needs to handle sessions in a\nnon-default way by using wolfSSL_clear\n\n## SUGGESTED REMEDIATION\n========================\n\nAfter a session has been cleared and is reused for the next client, it should be\nreinitialized. Source:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:26.582328Z"}, {"uuid": "7b669a2e-06d5-4cd9-bd34-c75c855d6d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38152", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/86304", "content": "Exploit Collector\nwolfSSL Session Resumption Denial Of Service\n\nhttps://4.bp.blogspot.com/-1sVwQJsRVpo/WWlvgaUDftI/AAAAAAAAIQM/9m_QfduSdAQi14Fs6kLQe2-YLO5Bx1iKQCLcBGAs/s1600/h87.png wolfSSL versions prior to 5.5.0 suffer from a denial of service condition related to session resumption. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation fault. The bug occurs after a client performs a handshake against a wolfSSL server and then closes the connection. If the server reuses the previous session structure (struct WOLFSSL) by calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello, which resumes the previous session, crashes the server. Note, that this bug only exists in resumed handshakes using TLS session resumption. This bug was discovered using the novel symbolic-model-guided fuzzer tlspuffin.\n\nSHA-256 | 1b9325efbf39604c8462f0298d0d79f674ddf2937457ea4559d7da387dd41a30Download # wolfSSL before 5.5.0: Denial-of-service with session resumption\n=================================================================\n\n## INFO\n=======\n\nThe CVE project has assigned the id CVE-2022-38152 to this issue.\n\nSeverity: 7.5 HIGH\nAffected version: before 5.5.0\nEnd of embargo: Ended August 30, 2022\n\n## SUMMARY\n==========\n\nWhen a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on\nits session, the server crashes with a segmentation fault. The bug occurs after\na client performs a handshake against a wolfSSL server and then closes the\nconnection. If the server reuses the previous session structure (struct WOLFSSL)\nby calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello,\nwhich resumes the previous session, crashes the server. Note, that this bug only\nexists in resumed handshakes using TLS session resumption. This bug was\ndiscovered using the novel symbolic-model-guided fuzzer tlspuffin.\n\n## DETAILS\n==========\n\nLine numbers below are valid for the wolfSSL Git tag v5.4.0-stable. The\nvulnerability is exploitable with default compilation flags. If the\n--enable-postauth flag is used, then this bug is no longer exploitable. When\ncreating a new TLS session (represented by a struct WOLFSSL), a struct called\narrays is allocated in internal.c:6652.\n\n```\nint InitSSL(WOLFSSL* ssl, WOLFSSL_CTX* ctx, int writeDup)\n{\n...\nssl->arrays = (Arrays*)XMALLOC(sizeof(Arrays), ssl->heap,\nDYNAMIC_TYPE_ARRAYS);\n...\n}\n```\n\nNote that this function is only called when creating a new session structure\nusing wolfSSL_new. After a handshake is done, resources related to it are freed\nby default using the FreeHandshakeResources function in line ssl.c:3735. This\nfrees the memory behind ssl->arrays and sets the pointer to NULL.\n\n```\nvoid FreeHandshakeResources(WOLFSSL* ssl)\n{\n...\nif (!ssl->options.tls1_3)\nFreeArrays(ssl)\n...\n}\n\nvoid FreeArrays(WOLFSSL* ssl)\n{\n...\nssl->arrays = NULL;\n}\n```\n\nIf the compile flag --enable-postauth is not set, the variable options.tls1_3 is\nfalse, and therefore the arrays are freed. If --enable-postauth is set, then the\narrays are not freed. The above code is executed during the handshake of a fresh\nsession. Users of wolfSSL might not allocate a new session by using\nwolfSSL_new(), but reuse a previous struct WOLFSSL. This can be done by calling\nwolfSSL_clear(WOLFSSL* ssl) on the previous session and reusing the struct. The\nnext abbreviated handshake, which resumes the previous connection, will now\ncause a segmentation fault in tls13.c:5296.  The segmentation fault occurs\nbecause the arrays pointer still points to NULL as InitSSL is not called before\nthe Client Hello is handled.\n\n## AFFECTED VERSIONS\n====================\n\nwolfSSL 5.3.0 and 5.4.0 are affected The server needs to handle sessions in a\nnon-default way by using wolfSSL_clear\n\n## SUGGESTED REMEDIATION\n========================\n\nAfter a session has been cleared and is reused for the next client, it should be\nreinitialized. Source:packetstormsecurity.com", "creation_timestamp": "2026-09-04T23:00:04.098620Z"}, {"uuid": "76750185-7c84-4cdf-80b6-667c5fdda895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38152", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/86304", "content": "Exploit Collector\nwolfSSL Session Resumption Denial Of Service\n\nhttps://4.bp.blogspot.com/-1sVwQJsRVpo/WWlvgaUDftI/AAAAAAAAIQM/9m_QfduSdAQi14Fs6kLQe2-YLO5Bx1iKQCLcBGAs/s1600/h87.png wolfSSL versions prior to 5.5.0 suffer from a denial of service condition related to session resumption. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation fault. The bug occurs after a client performs a handshake against a wolfSSL server and then closes the connection. If the server reuses the previous session structure (struct WOLFSSL) by calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello, which resumes the previous session, crashes the server. Note, that this bug only exists in resumed handshakes using TLS session resumption. This bug was discovered using the novel symbolic-model-guided fuzzer tlspuffin.\n\nSHA-256 | 1b9325efbf39604c8462f0298d0d79f674ddf2937457ea4559d7da387dd41a30Download # wolfSSL before 5.5.0: Denial-of-service with session resumption\n=================================================================\n\n## INFO\n=======\n\nThe CVE project has assigned the id CVE-2022-38152 to this issue.\n\nSeverity: 7.5 HIGH\nAffected version: before 5.5.0\nEnd of embargo: Ended August 30, 2022\n\n## SUMMARY\n==========\n\nWhen a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on\nits session, the server crashes with a segmentation fault. The bug occurs after\na client performs a handshake against a wolfSSL server and then closes the\nconnection. If the server reuses the previous session structure (struct WOLFSSL)\nby calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello,\nwhich resumes the previous session, crashes the server. Note, that this bug only\nexists in resumed handshakes using TLS session resumption. This bug was\ndiscovered using the novel symbolic-model-guided fuzzer tlspuffin.\n\n## DETAILS\n==========\n\nLine numbers below are valid for the wolfSSL Git tag v5.4.0-stable. The\nvulnerability is exploitable with default compilation flags. If the\n--enable-postauth flag is used, then this bug is no longer exploitable. When\ncreating a new TLS session (represented by a struct WOLFSSL), a struct called\narrays is allocated in internal.c:6652.\n\n```\nint InitSSL(WOLFSSL* ssl, WOLFSSL_CTX* ctx, int writeDup)\n{\n...\nssl->arrays = (Arrays*)XMALLOC(sizeof(Arrays), ssl->heap,\nDYNAMIC_TYPE_ARRAYS);\n...\n}\n```\n\nNote that this function is only called when creating a new session structure\nusing wolfSSL_new. After a handshake is done, resources related to it are freed\nby default using the FreeHandshakeResources function in line ssl.c:3735. This\nfrees the memory behind ssl->arrays and sets the pointer to NULL.\n\n```\nvoid FreeHandshakeResources(WOLFSSL* ssl)\n{\n...\nif (!ssl->options.tls1_3)\nFreeArrays(ssl)\n...\n}\n\nvoid FreeArrays(WOLFSSL* ssl)\n{\n...\nssl->arrays = NULL;\n}\n```\n\nIf the compile flag --enable-postauth is not set, the variable options.tls1_3 is\nfalse, and therefore the arrays are freed. If --enable-postauth is set, then the\narrays are not freed. The above code is executed during the handshake of a fresh\nsession. Users of wolfSSL might not allocate a new session by using\nwolfSSL_new(), but reuse a previous struct WOLFSSL. This can be done by calling\nwolfSSL_clear(WOLFSSL* ssl) on the previous session and reusing the struct. The\nnext abbreviated handshake, which resumes the previous connection, will now\ncause a segmentation fault in tls13.c:5296.  The segmentation fault occurs\nbecause the arrays pointer still points to NULL as InitSSL is not called before\nthe Client Hello is handled.\n\n## AFFECTED VERSIONS\n====================\n\nwolfSSL 5.3.0 and 5.4.0 are affected The server needs to handle sessions in a\nnon-default way by using wolfSSL_clear\n\n## SUGGESTED REMEDIATION\n========================\n\nAfter a session has been cleared and is reused for the next client, it should be\nreinitialized. Source:packetstormsecurity.com", "creation_timestamp": "2026-09-05T01:00:09.140239Z"}]}