CVE-2020-36177

Critical

Description

RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.

SeverityCritical
CVSS9.8
Exploit probability—
ProductWolfssl
PublishedJan 6, 2021
First seenJan 6, 2021

How to fix

Update
  • wolfssl wolfssl4.6.0 or later

Affected products

ProductAffected versionsFixed in
wolfssl wolfsslv < 4.6.04.6.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.