Unscored CVE-2018-16870 EUVD-2018-8661GHSA-ch8h-fr7v-29p6

It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TL…

Published Jan 3, 2019 · Updated Aug 5, 2024 · Assigned by redhat

Package: wolfssl Package: wolfssl Ecosystem: Debian Ecosystem: Ubuntu

Description

It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to leakage of sensible data.

Affected products

Vendor	Product	Affected	Fixed
—	wolfssl	before 3.15.7	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 13	wolfssl	4.1.0+dfsg-1	—
Debian 12	wolfssl	4.1.0+dfsg-1	—

Ubuntu