Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Kemal Derya

#54966of 60,401
5.1Total CVSS
Vulnerabilities · 1
PT-2024-6157
2024-05-14
5.1
CVE-2024-5288
Wolfssl
Wolfssl
An issue was discovered in wolfSSL that leads to ECDSA key disclosure via a safe-error attack using Rowhammer, known as FAULT+PROBE. When `WOLFSSL CHECK SIG FAULTS` is used in signing operations with private ECC keys, such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery.