CVE-2017-6076
Fixed in a distro release EPSS <1%
In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine.
Products: wolfssl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wolfssl | 3.10.2+dfsg-1 |
| Debian 13 | wolfssl | 3.10.2+dfsg-1 |
| Ubuntu 16.04 LTS | wolfssl | no fix |