Поиск уязвимостей
Количество 6
Количество 6
CVE-2022-42961
An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in server-side TLS connections, might leak faulty ECC signatures. These signatures can be processed via an advanced technique for ECDSA key recovery. (In 5.5.0 and later, WOLFSSL_CHECK_SIG_FAULTS can be used to address the vulnerability.)
CVE-2022-42961
An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in server-side TLS connections, might leak faulty ECC signatures. These signatures can be processed via an advanced technique for ECDSA key recovery. (In 5.5.0 and later, WOLFSSL_CHECK_SIG_FAULTS can be used to address the vulnerability.)
CVE-2022-42961
An issue was discovered in wolfSSL before 5.5.0. A fault injection att ...
GHSA-9xwc-9mfx-fvvq
An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in server-side TLS connections, might leak faulty ECC signatures. These signatures can be processed via an advanced technique for ECDSA key recovery. (In 5.5.0 and later, WOLFSSL_CHECK_SIG_FAULTS can be used to address the vulnerability.)
ALT-PU-2022-2526
ALT-PU-2022-2526: package `wolfssl` update to version 5.5.0-alt1
ALT-PU-2023-1034
ALT-PU-2023-1034: package `wolfssl` update to version 5.5.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-42961 An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in server-side TLS connections, might leak faulty ECC signatures. These signatures can be processed via an advanced technique for ECDSA key recovery. (In 5.5.0 and later, WOLFSSL_CHECK_SIG_FAULTS can be used to address the vulnerability.) | CVSS3: 5.3 | 1% Низкий | около 4 лет назад |
 | CVE-2022-42961 An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in server-side TLS connections, might leak faulty ECC signatures. These signatures can be processed via an advanced technique for ECDSA key recovery. (In 5.5.0 and later, WOLFSSL_CHECK_SIG_FAULTS can be used to address the vulnerability.) | CVSS3: 5.3 | 1% Низкий | около 4 лет назад |
| CVE-2022-42961 An issue was discovered in wolfSSL before 5.5.0. A fault injection att ... | CVSS3: 5.3 | 1% Низкий | около 4 лет назад |
| GHSA-9xwc-9mfx-fvvq An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in server-side TLS connections, might leak faulty ECC signatures. These signatures can be processed via an advanced technique for ECDSA key recovery. (In 5.5.0 and later, WOLFSSL_CHECK_SIG_FAULTS can be used to address the vulnerability.) | CVSS3: 5.3 | 1% Низкий | около 4 лет назад |
| ALT-PU-2022-2526 ALT-PU-2022-2526: package `wolfssl` update to version 5.5.0-alt1 | CVSS3: 7.5 | около 4 лет назад | |
| ALT-PU-2023-1034 ALT-PU-2023-1034: package `wolfssl` update to version 5.5.4-alt1 | CVSS3: 9.1 | почти 4 года назад |
Уязвимостей на страницу