漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
wolfSSL ECDSA Certificate Verification
Vulnerability Description
Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions. This could lead to reduced security of ECDSA certificate-based authentication if the public CA key used is also known. This affects ECDSA/ECC verification when EdDSA or ML-DSA is also enabled.
CVSS Information
N/A
Vulnerability Type
证书验证不恰当
Vulnerability Title
wolfSSL 安全漏洞
Vulnerability Description
wolfSSL（CyaSSL）是美国wolfSSL公司的一个针对嵌入式系统开发人员使用的小的、可移植的嵌入式SSL编程库。 wolfSSL存在安全漏洞，该漏洞源于缺少哈希摘要大小和OID检查，可能导致验证ECDSA证书时接受小于允许值的摘要，从而降低基于ECDSA证书身份验证的安全性。
CVSS Information
N/A
Vulnerability Type
N/A