CVE-2018-16870

It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to leakage of sensible data.

Score

CVSS 3.0 5.9 Medium

Status

Modified - secalert@redhat.com

Published

2019-01-03

Last modified

2024-08-05

Weaknesses

CWE-200, CWE-310

Affected products

• Wolfssl (Wolfssl)

References

• http://cat.eyalro.net/
• https://github.com/wolfSSL/wolfssl/pull/1950