CVE-2015-6925: wolfSSL

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.

Affected products

• wolfSSL wolfSSL: up to and including 3.6.6

Published 2016-01-22. Last modified 2026-06-17.