The C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wolfssl | Wolfssl | * | 3.9.8 (including) |
| Wolfssl | Ubuntu | artful | * |
| Wolfssl | Ubuntu | esm-apps/xenial | * |
| Wolfssl | Ubuntu | xenial | * |
| Wolfssl | Ubuntu | yakkety | * |
| Wolfssl | Ubuntu | zesty | * |