Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9chr-m38j-w26g

Опубликовано: 30 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.

EPSS

Процентиль: 48%
0.00576
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-1256
CWE-252
CWE-74

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 2 лет назад

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.

CVSS3: 8.8
nvd
около 2 лет назад

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.

CVSS3: 8.8
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 8.8
debian
около 2 лет назад

Fault Injection vulnerability in RsaPrivateDecryption function in wolf ...

CVSS3: 9.1
altlinux
больше 2 лет назад

ALT-PU-2024-18314: package `wolfssl` update to version 5.7.0-alt1

EPSS

Процентиль: 48%
0.00576
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-1256
CWE-252
CWE-74