CVE-2026-3230
Improper key_share validation in TLS 1.3 HelloRetryRequest
Résumé
Improper key_share validation in TLS 1.3 HelloRetryRequest
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communications via a crafted HelloRetryRequest followed by a ServerHello message that omits the required key_share extension, resulting in derivation of predictable traffic secrets from (EC)DHE shared secret. This issue does not affect the client's authentication of the server during TLS handshakes.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-3230 wolfssl
- Ubuntu UBUNTU-CVE-2026-3230 wolfssl
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com