Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-16870 →
DEBIAN-CVE-2018-16870
It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to leakage of sensible data.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
wolfssl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+dfsg-1"}]}]
Debian:13
wolfssl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org