Security Advisory 2021-02-02-2 - wolfSSL heap buffer overflow in RsaPad_PSS (CVE-2020-36177)

DESCRIPTION RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size. The issue is marked as critical with CVSS score of 9.8. REQUIREMENTS It's still work in progress, there is not that much information about it...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

DEBIAN-CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

Out-of-bounds

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

CVE-2020-36177

CVE-2020-36177 describes an out-of-bounds write in RsaPad_PSS within wolfcrypt/src/rsa.c of wolfSSL before 4.6.0, triggered by certain relationships between key size and digest size. The CVSSv3.1 base score is 9.8 (CRITICAL). Documents in OpenWrt and CNVD/NVD/osv references confirm the issue and ...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

CVE-2020-36177

RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size...

Wolfssl wolfSSL 缓冲区错误漏洞

wolfSSL is a small, portable, embedded SSL/TLS library intended for use by embedded systems developers. An out-of-bounds write vulnerability exists in RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL versions prior to 4.6.0. No detailed vulnerability details are provided at this time...

OSV-2020-2092 Heap-buffer-overflow in RsaPad_PSS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26567 Crash type: Heap-buffer-overflow WRITE Crash state: RsaPadPSS wcRsaPadex RsaPublicEncryptEx...