CVE-2019-19962

Опубликовано: 25 дек. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography.

Ссылки

https://github.com/wolfSSL/wolfssl/commit/23878512c65834d12811b1107d19a001478eca5d
Patch
Third Party Advisory
https://github.com/wolfSSL/wolfssl/releases/tag/v4.3.0-stable
Release Notes
Third Party Advisory
https://github.com/wolfSSL/wolfssl/commit/23878512c65834d12811b1107d19a001478eca5d
Patch
Third Party Advisory
https://github.com/wolfSSL/wolfssl/releases/tag/v4.3.0-stable
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*

Версия до 4.3.0 (исключая)

EPSS

Процентиль: 40%

0.00184

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-347

Связанные уязвимости

CVE-2019-19962

CVSS3: 7.5

ubuntu

около 6 лет назад

wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography.

CVE-2019-19962

CVSS3: 7.5

debian

около 6 лет назад

wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, lea ...

GHSA-w5pp-v599-fpjp

CVSS3: 7.5

github

больше 3 лет назад

wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography.

EPSS

Процентиль: 40%

0.00184

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-347