Summaryinfo

A vulnerability was found in wolfSSL up to 5.6.4. It has been rated as problematic. Affected is an unknown function of the component RSA. This manipulation causes information exposure. This vulnerability is handled as CVE-2023-6935. The attack can be initiated remotely. There is not any exploit available. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Detailsinfo

A vulnerability classified as problematic was found in wolfSSL up to 5.6.4. Affected by this vulnerability is an unknown function of the component RSA. The manipulation with an unknown input leads to a information exposure vulnerability. The CWE definition for the vulnerability is CWE-203. The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not. As an impact it is known to affect confidentiality. The summary by CVE is:

wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure: --enable-all CFLAGS="-DWOLFSSL_STATIC_RSA" The define “WOLFSSL_STATIC_RSA” enables static RSA cipher suites, which is not recommended, and has been disabled by default since wolfSSL 3.6.6.  Therefore the default build since 3.6.6, even with "--enable-all", is not vulnerable to the Marvin Attack. The vulnerability is specific to static RSA cipher suites, and expected to be padding-independent. The vulnerability allows an attacker to decrypt ciphertexts and forge signatures after probing with a large number of test observations. However the server’s private key is not exposed.

The weakness was released 02/10/2024 by Hubert Kario. It is possible to read the advisory at people.redhat.com. This vulnerability is known as CVE-2023-6935 since 12/18/2023. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

The vulnerability scanner Nessus provides a plugin with the ID 212799 (CBL Mariner 2.0 Security Update: mariadb (CVE-2023-6935)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (212799). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Name

• wolfSSL

Version

• 5.6.0
• 5.6.1
• 5.6.2
• 5.6.3
• 5.6.4

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion