wolfSSL encryption issue vulnerability (CNVD-2020-22973)

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in the wceccmulmodex of the ecc.c file in wolfSSL version 4.3.0. An attacker can exploit this...

User Enumeration

Overview Affected versions of this package are vulnerable to User Enumeration wolfSSL 4.3.0 has mulmod code in wceccmulmodex in ecc.c that does not properly resist timing side-channel attacks. Remediation Upgrade wolfssl to version 5.0.0 or higher. References - GitHub Gist - GitHub PR...

PT-2020-12799

Name of the Vulnerable Software and Affected Versions wolfSSL version 4.3.0 Description The issue is related to the mulmod code in the wc ecc mulmod ex function in ecc.c, which does not properly resist timing side-channel attacks. This could potentially allow an attacker to exploit the timing...

PT-2019-16022

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 4.3.0 Description The issue is related to the wc ecc mulmod ex function, which does not properly resist side-channel attacks. Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve th...