Unscored CVE-2020-11735 EUVD-2020-4077GHSA-wc3x-qj47-37mg

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, …

Published Jun 25, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: wolfssl Package: wolfssl Ecosystem: Debian Ecosystem: Ubuntu

Description

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 13	wolfssl	4.4.0+dfsg-1	—
Debian 12	wolfssl	4.4.0+dfsg-1	—

Ubuntu