Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-dnrg-xpru-6qc8
Vulnerability ID VCID-dnrg-xpru-6qc8
Aliases CVE-2019-14317
Summary wolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
epss 0.00392 https://api.first.org/data/v1/epss?cve=CVE-2019-14317
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2019-14317
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14317
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.60059
EPSS Score 0.00392
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:33:36.082285+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0