CVE-2019-14317

Summary of the vulnerability (CVE-2019-14317) : In wolfSSL/wolfCrypt up to version 4.1.0, DSA nonces are biased because dsa.c fixes two bits of the nonces. This bias makes it possible for a remote attacker to recover the long-term DSA private key after observing several hundred signatures, via a ...

CVE-2019-14317: Insufficient Entropy

wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...

PT-2019-13604

Name of the Vulnerable Software and Affected Versions wolfSSL and wolfCrypt versions 4.1.0 and earlier Description The issue allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. This occurs because the dsa.c file fixes two bits of...

PT-2019-15694

Name of the Vulnerable Software and Affected Versions wolfSSL versions 4.1.0 through 4.2.0c Description The issue arises from missing sanity checks of memory accesses in parsing ASN.1 certificate data during handshaking. Specifically, a one-byte heap-based buffer overflow occurs inside the...

DEBIAN-CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

UBUNTU-CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

Design/Logic Flaw

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-13628

CVE-2019-13628 affects wolfSSL/wolfCrypt 4.0.0 and earlier when built without --enable-fpecc, --enable-sp, or --enable-sp-math. The issue is a timing side-channel in ECDSA signature generation caused by ecc.c scalar multiplication leaking bit-length information. This may allow a local attacker wh...

CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-13628: Observable Discrepancy

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

PT-2019-13454

Name of the Vulnerable Software and Affected Versions wolfSSL and wolfCrypt versions 4.0.0 and earlier Description The issue is a timing side channel in ECDSA signature generation, which allows a local attacker to infer information about the nonces used and potentially recover the private key. Th...

wolfSSL buffer overflow vulnerability (CNVD-2019-34376)

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A buffer overflow vulnerability exists in the 'CheckCertSignatureex' function in the wolfcrypt/src/asn.c file in wolfSSL 4.1.0 and earli...

Heap overflow

In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...

UBUNTU-CVE-2019-16748

In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...

PT-2019-14809

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 4.1.0 Description The issue is related to a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking, resulting in a one-byte heap-based buffer over-read. This occurs in the...

CVE-2019-15651

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASNBOOLEAN byte is mishandled for a crafted DER certificate in GetLengthex...

PT-2019-14323

Name of the Vulnerable Software and Affected Versions wolfSSL version 4.1.0 Description The issue is related to a one-byte heap-based buffer over-read in the DecodeCertExtensions function located in wolfcrypt/src/asn.c. This occurs because the reading of the ASN BOOLEAN byte is mishandled for a...