CVE-2019-19963

An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled

published December 24, 2019

CVSS
—
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled. DSA signing uses the BEEA algorithm during modular inversion of the nonce, leading to a side-channel attack against the nonce.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00955 · 61.0th percentile
Published
2019-12-24T23:03Z
EPSS history
Timeline
  • 24 DEC 23:03Z
    An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled
    cvelistv5