CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
20.0%
Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attackerย co-resides in the same system with a victim process toย disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | wolfssl | <=ย 5.5.4-2+deb12u1 | wolfssl_5.5.4-2+deb12u1_all.deb |
Debian | 11 | all | wolfssl | <=ย 4.6.0+p1-0+deb11u2 | wolfssl_4.6.0+p1-0+deb11u2_all.deb |
Debian | 999 | all | wolfssl | <ย 5.7.0-0.3 | wolfssl_5.7.0-0.3_all.deb |
Debian | 13 | all | wolfssl | <ย 5.7.0-0.3 | wolfssl_5.7.0-0.3_all.deb |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
20.0%