← All advisories

Medium severity5.9NVD Advisory· Published Aug 12, 2021· Updated Jun 17, 2026

CVE-2021-38597

CVE-2021-38597

Description

wolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant response data that contains the NoCheck extension.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

wolfSSL/wolfSSLdescription
WolfSSL/Wolfsslllm-fuzzy2 versions
<4.8.1+ 1 more
- (no CPE)range: <4.8.1
- cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*range: <4.8.1

Patches

Vulnerability mechanics

References

2

github.com/wolfSSL/wolfssl/commit/f93083be72a3b3d956b52a7ec13f307a27b6e093nvdPatchThird Party Advisory
www.wolfssl.com/docs/wolfssl-changelog/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.