Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Yarkin Doroz

Researcher fromVernam Applied Cryptography and Cybersecurity Lab at Worcester Polytechnic Institute
#53957of 60,401
5.3Total CVSS
Vulnerabilities · 1
PT-2022-26682
2022-08-31
5.3
CVE-2022-42961
Wolfssl
Wolfssl
An issue was discovered in wolfSSL that allows a fault injection attack on RAM via Rowhammer, leading to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in server-side TLS connections, might leak faulty ECC signatures. These signatures can be processed via an advanced technique for ECDSA key recovery.