الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Kemal Derya

#55047من 60,402
5.1إجمالي CVSS
الثغرات · 1
PT-2024-6157
2024-05-14
5.1
CVE-2024-5288
Wolfssl
Wolfssl
An issue was discovered in wolfSSL that leads to ECDSA key disclosure via a safe-error attack using Rowhammer, known as FAULT+PROBE. When `WOLFSSL CHECK SIG FAULTS` is used in signing operations with private ECC keys, such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery.