Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qvjw-73xm-jw34

Опубликовано: 10 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3

Описание

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

EPSS

Процентиль: 5%
0.00019
Низкий

6.3 Medium

CVSS4

Дефекты

CWE-354

Связанные уязвимости

ubuntu
5 дней назад

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

nvd
5 дней назад

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

debian
5 дней назад

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could a ...

EPSS

Процентиль: 5%
0.00019
Низкий

6.3 Medium

CVSS4

Дефекты

CWE-354