CVE-2020-15309

An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed

published August 21, 2020

CVSS
—
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local attackers can conduct a cache-timing attack against public key operations. These attackers may already have obtained sensitive information if the affected system has been used for private key operations (e.g., signing with a private key).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.2th percentile
Published
2020-08-21T13:16Z
EPSS history
Timeline
  • 21 AUG 13:16Z
    An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed
    cvelistv5