Description (CNA)
In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/96422
- https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable
ADP enrichment
No English description supplied.