CVE-2020-36177

2021-01-0616:15:12

Google

osv.dev

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON

RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.

CPENameOperatorVersion
wolfssleq3.6.9d
wolfssleq3.10.3
wolfssleq3.7.0
wolfssleq2.0.3
wolfssleq3.15.8
wolfssleqWCv4.0-RC5
wolfssleq3.6.2
wolfssleq3.6.9c
wolfssleq3.10.4
wolfssleq4.5.0-stable

Name	Operator	Version
wolfssl	eq	3.6.9d
wolfssl	eq	3.10.3
wolfssl	eq	3.7.0
wolfssl	eq	2.0.3
wolfssl	eq	3.15.8
wolfssl	eq	WCv4.0-RC5
wolfssl	eq	3.6.2
wolfssl	eq	3.6.9c
wolfssl	eq	3.10.4
wolfssl	eq	4.5.0-stable