Olivier Levillain

**Name of the Vulnerable Software and Affected Versions** wolfSSH versions 1.4.21 and earlier **Description** The wolfSSH key exchange state machine can be manipulated, potentially leading to the exposure of the client’s password in plaintext. This manipulation could also allow an attacker to trick the client into sending a fraudulent signature or bypassing user authentication altogether. The issue affects both client and server applications utilizing wolfSSH. **Recommendations** Update to a newer version of wolfSSH or apply the available fix patch. It is recommended to update credentials used with wolfSSH.

**Name of the Vulnerable Software and Affected Versions** wolfSSL versions prior to 5.2.0 **Description** The issue allows certificate validation to be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the `sig algo` field differs between the `certificate verify` message and the `certificate` message. **Recommendations** For versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue. As a temporary workaround, consider restricting TLS 1.3 connections until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** wolfSSL versions prior to 4.7.0 **Description** The issue arises from the `DoTls13CertificateVerify` function in `tls13.c`, which does not properly handle anomalous peer behavior. Specifically, it continues processing when it receives an ED22519, ED448, ECC, or RSA signature without the corresponding certificate. This affects the client side, allowing man-in-the-middle attackers to impersonate TLS 1.3 servers. **Recommendations** For versions prior to 4.7.0, update to version 4.7.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `DoTls13CertificateVerify` function in `tls13.c` until a patch is available.

**Name of the Vulnerable Software and Affected Versions** GnuPG versions prior to 1.4.17 GnuPG versions prior to 2.0.24 GnuPG2 (affected versions not specified) **Description** The issue is related to multiple vulnerabilities in the GnuPG package of the Debian GNU/Linux operating system, which can lead to a disruption of protected information availability. These vulnerabilities can be exploited remotely. Specifically, the `do uncompress` function in `g10/compress.c` allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets. **Recommendations** For GnuPG versions prior to 1.4.17, update to version 1.4.17 or later to resolve the issue. For GnuPG versions prior to 2.0.24, update to version 2.0.24 or later to resolve the issue. For GnuPG2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.