Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-3230

Опубликовано: 19 мар. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 2.7

Описание

Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communications via a crafted HelloRetryRequest followed by a ServerHello message that omits the required key_share extension, resulting in derivation of predictable traffic secrets from (EC)DHE shared secret. This issue does not affect the client's authentication of the server during TLS handshakes.

РелизСтатусПримечание
devel

not-affected

5.9.1-0.1
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

needs-triage

noble

needs-triage

Показывать по

EPSS

Процентиль: 11%
0.00209
Низкий

2.7 Low

CVSS3

Связанные уязвимости

CVSS3: 2.7
nvd
5 месяцев назад

Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communications via a crafted HelloRetryRequest followed by a ServerHello message that omits the required key_share extension, resulting in derivation of predictable traffic secrets from (EC)DHE shared secret. This issue does not affect the client's authentication of the server during TLS handshakes.

msrc
4 месяца назад

Improper key_share validation in TLS 1.3 HelloRetryRequest

CVSS3: 2.7
debian
5 месяцев назад

Missing required cryptographic step in the TLS 1.3 client HelloRetryRe ...

CVSS3: 2.7
github
5 месяцев назад

Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communications via a crafted HelloRetryRequest followed by a ServerHello message that omits the required key_share extension, resulting in derivation of predictable traffic secrets from (EC)DHE shared secret. This issue does not affect the client's authentication of the server during TLS handshakes.

EPSS

Процентиль: 11%
0.00209
Низкий

2.7 Low

CVSS3