Wolfssl Local Information Disclosure Vulnerability

WolfSSL formerly known as CyaSSL is the United States WolfSSL company for embedded systems developers to use embedded SSL programming library. A local information disclosure vulnerability exists in Wolfssl's fpmulcomba function. An attacker exploiting this vulnerability could extract RSA key...

CVE-2017-6076: Exposure of Sensitive Information to an Unauthorized Actor

In versions of wolfSSL before 3.10.2 the function fpmulcomba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine...

CVE-2017-6076

CVE-2017-6076 affects wolfSSL prior to 3.10.2, where the fp_mul_comba function can enable a local attacker with access to a machine’s cache view to extract RSA key information. The vulnerability is a local confidentiality issue (HIGH impact per the CVE/NVD data) resulting from this specific multi...

CVE-2017-6076

In versions of wolfSSL before 3.10.2 the function fpmulcomba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine...