| Name | CVE-2026-5772 |
| Description | A 1-byte stack buffer over-read was identified in the MatchDomainName function (src/internal.c) during wildcard hostname validation when the LEFT_MOST_WILDCARD_ONLY flag is active. If a wildcard * exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check, which could cause a crash. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 1133835 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| wolfssl (PTS) | bullseye | 4.6.0+p1-0+deb11u2 | vulnerable |
| bookworm | 5.5.4-2+deb12u2 | vulnerable | |
| trixie | 5.7.2-0.1+deb13u1 | vulnerable | |
| sid, forky | 5.9.1-0.1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| wolfssl | source | (unstable) | 5.9.1-0.1 | 1133835 |
[trixie] - wolfssl <no-dsa> (Minor issue)
[bookworm] - wolfssl <no-dsa> (Minor issue)
[bullseye] - wolfssl <postponed> (Minor issue)
https://github.com/wolfSSL/wolfssl/pull/10119
Fixed by: https://github.com/wolfSSL/wolfssl/commit/1274c7b5e7e9e28d88caf60662f6f9624bf834b7 (v5.9.1-stable)
Fixed by: https://github.com/wolfSSL/wolfssl/commit/90d631232308a59a03f6f6f455f9ac373db7af3d (v5.9.1-stable)