Skip to content
OpenAdvisories

Package · Debian

wolfssl

151 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-6937

    Improper (D)TLS key boundary enforcement

    wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was possible to combine (D)TLS messages using different keys into one (D)TLS record. The most extreme edge case is that, in (D)TLS 1.3, it was …

    wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2023-6935

    Marvin Attack vulnerability in SP Math All RSA

    wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure: --enable-all CFLAGS="-DWOLFSSL_STATIC_RSA" The define “WOLFSSL_STATIC_RSA” en…

    wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2022-42961

    An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key discl…

    wolfssl wolfssl Debian Ubuntu
  • Medium 4.7
    CVE-2019-13628

    wolfCrypt leaks cryptographic information via timing side channel

    wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature o…

    wolfssl wolfssl wolfcrypt Debian Ubuntu PyPI