CVE-2024-1545
Fault Injection of RSA encryption in WolfCrypt
Summary
Fault Injection of RSA encryption in WolfCrypt
Original description
The description as published by the source.
Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-1545 wolfssl
- Ubuntu UBUNTU-CVE-2024-1545 wolfssl
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web github.com