Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p7fr-35j6-p64g

Опубликовано: 30 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.

EPSS

Процентиль: 40%
0.00464
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-1256
CWE-74

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 2 лет назад

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.

CVSS3: 8.8
nvd
около 2 лет назад

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.

CVSS3: 8.8
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 8.8
debian
около 2 лет назад

Fault Injection vulnerability inwc_ed25519_sign_msg function in wolfss ...

CVSS3: 9.1
altlinux
больше 2 лет назад

ALT-PU-2024-18314: package `wolfssl` update to version 5.7.0-alt1

EPSS

Процентиль: 40%
0.00464
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-1256
CWE-74