CVE-2026-3230
Improper key_share validation in TLS 1.3 HelloRetryRequest
Summary
Improper key_share validation in TLS 1.3 HelloRetryRequest
Original description
The description as published by the source.
Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communications via a crafted HelloRetryRequest followed by a ServerHello message that omits the required key_share extension, resulting in derivation of predictable traffic secrets from (EC)DHE shared secret. This issue does not affect the client's authentication of the server during TLS handshakes.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-3230 wolfssl
- Ubuntu UBUNTU-CVE-2026-3230 wolfssl
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com