CVE-2017-6076 in wolfSSL
Summary
In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine.
Reservation
02/17/2017
Disclosure
02/23/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 97232 | wolfSSL Cache fp_mul_comba Key information disclosure | 200 | Not defined | Official fix | CVE-2017-6076 |