Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-1545
HistoryAug 30, 2024 - 12:00 a.m.

CVE-2024-1545

2024-08-3000:00:00
ubuntu.com
ubuntu.com
cve-2024-1545
fault injection
rsaprivatedecryption
wolfssl
linux
windows
remote attacker
disclosure
escalate privileges
rowhammer
rsakey

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

20.0%

Fault Injection vulnerability in RsaPrivateDecryption function in
wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows
remote attackerย co-resides in the same system with a victim process
toย disclose information and escalate privileges via Rowhammer fault
injection to the RsaKey structure.

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

20.0%