Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9chr-m38j-w26g

Опубликовано: 30 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.

EPSS

Процентиль: 39%
0.00169
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-1256
CWE-252
CWE-74

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 1 года назад

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.

CVSS3: 5.9
nvd
больше 1 года назад

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.

CVSS3: 8.8
msrc
около 1 года назад

Описание отсутствует

CVSS3: 5.9
debian
больше 1 года назад

Fault Injection vulnerability in RsaPrivateDecryption function in wolf ...

EPSS

Процентиль: 39%
0.00169
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-1256
CWE-252
CWE-74