Поиск уязвимостей
Количество 8
Количество 8
BDU:2024-07076
Уязвимость конфигурации WOLFSSL_CHECK_SIG_FAULTS библиотеки SSL/TLS WolfSSL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2025-9488
ALT-PU-2025-9488: package `wolfssl` update to version 5.8.2-alt1
ALT-PU-2024-12644
ALT-PU-2024-12644: package `netatalk` update to version 3.2.8-alt1
CVE-2024-5288
An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with private ECC keys, such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery.
CVE-2024-5288
An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with private ECC keys, such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery.
CVE-2024-5288
CVE-2024-5288
An issue was discovered in wolfSSL before 5.7.0. A safe-error attack v ...
GHSA-rrg9-cmw9-3pwx
An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with private ECC keys, such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-07076 Уязвимость конфигурации WOLFSSL_CHECK_SIG_FAULTS библиотеки SSL/TLS WolfSSL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.1 | 0% Низкий | больше 2 лет назад |
| ALT-PU-2025-9488 ALT-PU-2025-9488: package `wolfssl` update to version 5.8.2-alt1 | CVSS3: 7.5 | больше 1 года назад | |
| ALT-PU-2024-12644 ALT-PU-2024-12644: package `netatalk` update to version 3.2.8-alt1 | CVSS3: 7.5 | около 2 лет назад | |
 | CVE-2024-5288 An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with private ECC keys, such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery. | CVSS3: 5.9 | 0% Низкий | около 2 лет назад |
 | CVE-2024-5288 An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with private ECC keys, such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery. | CVSS3: 5.9 | 0% Низкий | около 2 лет назад |
 | CVSS3: 5.1 | 0% Низкий | почти 2 года назад | |
| CVE-2024-5288 An issue was discovered in wolfSSL before 5.7.0. A safe-error attack v ... | CVSS3: 5.9 | 0% Низкий | около 2 лет назад |
| GHSA-rrg9-cmw9-3pwx An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with private ECC keys, such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery. | CVSS3: 5.1 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу