2356 matches found
CVE-2019-19960: Undefined Security Weakness
In wolfSSL before 4.3.0, wceccmulmodex does not properly resist side-channel attacks...
PT-2019-16024
Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 4.3.0 Description An issue was discovered in a non-default configuration where DSA is enabled, allowing a side-channel attack against the nonce due to the use of the BEEA algorithm during modular inversion of the nonc...
Unspecified vulnerability in wolfSSL (CNVD-2020-01645)
wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in wolfSSL versions prior to 4.3.0, which can be exploited by an attacker to perform a side-channel atta...
Unspecified vulnerability in wolfSSL (CNVD-2020-01644)
wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in the 'wceccmulmodex' function in wolfSSL versions prior to 4.3.0, which can be exploited by an attacke...
PT-2019-16022
Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 4.3.0 Description The issue is related to the wc ecc mulmod ex function, which does not properly resist side-channel attacks. Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve th...
CVE-2019-19962: Improper Verification of Cryptographic Signature
wolfSSL before 4.3.0 mishandles calls to wcSignatureGenerateHash, leading to fault injection in RSA cryptography...
CVE-2019-14317
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
CVE-2019-14317
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
DEBIAN-CVE-2019-14317
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
CVE-2019-14317
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
Code injection
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
UBUNTU-CVE-2019-14317
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
CVE-2019-14317
Summary of the vulnerability (CVE-2019-14317) : In wolfSSL/wolfCrypt up to version 4.1.0, DSA nonces are biased because dsa.c fixes two bits of the nonces. This bias makes it possible for a remote attacker to recover the long-term DSA private key after observing several hundred signatures, via a ...
CVE-2019-14317
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
CVE-2019-14317
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
CVE-2019-14317
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
PT-2019-13604
Name of the Vulnerable Software and Affected Versions wolfSSL and wolfCrypt versions 4.1.0 and earlier Description The issue allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. This occurs because the dsa.c file fixes two bits of...
CVE-2019-14317: Insufficient Entropy
wolfSSL and wolfCrypt 4.1.0 and earlier formerly known as CyaSSL generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces...
wolfSSL DoPreSharedKeys PSK Identity Buffer Overflow (CVE-2019-11873)
A buffer overflow vulnerability exists in wolfSSL embedded SSL/TLS library. The vulnerability is due to improper validation of PSK identity size in the requests. A remote attacker could exploit this vulnerability by sending maliciously crafted requests to a target server. Successful exploitation ...