CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

Security Advisory 2021-02-02-2 - wolfSSL heap buffer overflow in RsaPad_PSS (CVE-2020-36177)

DESCRIPTION RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size. The issue is marked as critical with CVSS score of 9.8. REQUIREMENTS It's still work in progress, there is not that much information about it...

CVE-2020-36177

creationtimestamp| type| source ---|---|--- 2021-01-06 18:39:30+00:00| seen| https://t.me/cibsecurity/21673...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

CVE-2020-36177

CVE-2020-36177 describes an out-of-bounds write in RsaPad_PSS within wolfcrypt/src/rsa.c of wolfSSL before 4.6.0, triggered by certain relationships between key size and digest size. The CVSSv3.1 base score is 9.8 (CRITICAL). Documents in OpenWrt and CNVD/NVD/osv references confirm the issue and ...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...