This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-15309 →

DEBIAN-CVE-2020-15309

An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local attackers can conduct a cache-timing attack against publ...

Original description

The description as published by the source.

An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local attackers can conduct a cache-timing attack against public key operations. These attackers may already have obtained sensitive information if the affected system has been used for private key operations (e.g., signing with a private key).

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 wolfssl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0+dfsg-1"}]}]

Debian:13 wolfssl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0+dfsg-1"}]}]

References

advisory security-tracker.debian.org