Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p7fr-35j6-p64g

Опубликовано: 30 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.

EPSS

Процентиль: 53%
0.003
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-1256
CWE-74

Связанные уязвимости

CVSS3: 6.7
ubuntu
больше 1 года назад

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.

CVSS3: 6.7
nvd
больше 1 года назад

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.

CVSS3: 8.8
msrc
около 1 года назад

Описание отсутствует

CVSS3: 6.7
debian
больше 1 года назад

Fault Injection vulnerability inwc_ed25519_sign_msg function in wolfss ...

EPSS

Процентиль: 53%
0.003
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-1256
CWE-74