CVE-2014-2903

CVE-2014-2903

This page contains facts from public vulnerability sources. Check the original advisory before updating.

CyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers to spoof servers via a crafted server certificate not authorized for use in an SSL/TLS handshake.

CVSS 5.9 · Medium · EPSS 1.0% · Fix available

Published

2017-10-06T15:00:00.000Z

Updated

2024-08-06T10:28:46.292Z

Stack: system

Check your server →