Pesquisadores
Voltar
Danielmgmi
Pesquisador de
Worcester Polytechnic Institute
#17134
de 60,401
18.1
CVSS total
Vulnerabilidades
·
3
Média
2
Alta
1
PT-2019-16022
2019-12-24
5.3
CVE-2019-19960
Wolfssl
Wolfssl
The issue is related to the `wc ecc mulmod ex` function, which does not properly resist side-channel attacks.
PT-2019-16023
2019-12-24
7.5
CVE-2019-19962
Wolfssl
Wolfssl
The issue is related to the mishandling of calls to the `wc SignatureGenerateHash` function, which can lead to fault injection in RSA cryptography.
PT-2019-16024
2019-12-24
5.3
CVE-2019-19963
Wolfssl
Wolfssl
An issue was discovered in a non-default configuration where DSA is enabled, allowing a side-channel attack against the nonce due to the use of the BEEA algorithm during modular inversion of the nonce in DSA signing.