CVE Vulnerabilities

CVE-2019-14317

Insufficient Entropy

Published: Dec 11, 2019 | Modified: Jul 21, 2021
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

wolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces. This allows a remote attacker to compute the long term private key from several hundred DSA signatures via a lattice attack. The issue occurs because dsa.c fixes two bits of the generated nonces.

Weakness

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

Affected Software

Name Vendor Start Version End Version
Wolfssl Wolfssl * 4.2.0 (excluding)
Wolfssl Ubuntu bionic *
Wolfssl Ubuntu disco *
Wolfssl Ubuntu eoan *
Wolfssl Ubuntu trusty *
Wolfssl Ubuntu xenial *

Potential Mitigations

References