Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (5)
| Vulnerability |
Summary |
Aliases |
|
VCID-8krv-jqjg-uqc8
|
security update
|
CVE-2016-7440
|
|
VCID-9bqq-cr1k-2fhq
|
The C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences.
|
CVE-2016-7438
|
|
VCID-cd24-z82g-fuhm
|
wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.
|
CVE-2015-6925
|
|
VCID-v5gp-x49d-bbcg
|
wolfSSL: insufficient hardening of RSA-CRT implementation (Oracle MySQL CPU Jan 2016)
|
CVE-2015-7744
|
|
VCID-zfyg-ffzg-myd7
|
The C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences.
|
CVE-2016-7439
|