CVE-2025-11935
Forward Secrecy Violation in WolfSSL TLS 1.3
Résumé
Forward Secrecy Violation in WolfSSL TLS 1.3
Description d'origine
La description telle que publiée par la source (souvent en anglais).
With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS (perfect forward secrecy) and the client would continue on with the connection using PSK without PFS. This happened when a server responded to a ClientHello containing psk_dhe_ke without a key_share extension. The re-use of an authenticated PSK connection that on the clients side unexpectedly did not have PFS, reduces the security of the connection.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-11935 wolfssl
- Ubuntu UBUNTU-CVE-2025-11935 wolfssl
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web wolfssl.com