CVE-2017-13099
High · 7.5CVSS
7.5
EPSS
27.4%
Published
Dec 13, 2017
CISA due date
—
The record
wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | wolfssl | 0 | 3.13.0+dfsg-1 |
| Debian:12 | wolfssl | 0 | 3.13.0+dfsg-1 |
| Debian:13 | wolfssl | 0 | 3.13.0+dfsg-1 |
| Ubuntu:16.04:LTS | wolfssl | 0 | No fix |
| Ubuntu:18.04:LTS | wolfssl | 0 | 3.13.0+dfsg-1 |
| Ubuntu:Pro:16.04:LTS | wolfssl | 0 | No fix |
Related vulnerabilities
- CVE-2024-2881 Fault Injection vulnerability in wc_ed25519_sign_msg function in… Also affects wolfssl
- CVE-2024-1545 Fault Injection vulnerability in RsaPrivateDecryption function in… Also affects wolfssl
- CVE-2024-1543 The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects… Also affects wolfssl
- CVE-2024-5814 A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a… Also affects wolfssl
- CVE-2024-1544 Generating the ECDSA nonce k samples a random number r and then truncates this randomness… Also affects wolfssl
- CVE-2024-0901 Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or… Also affects wolfssl
- CVE-2023-6936 In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS… Also affects wolfssl
- CVE-2023-6937 wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key… Also affects wolfssl