wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography.
Weakness
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wolfssl | Wolfssl | * | 4.3.0 (excluding) |
| Wolfssl | Ubuntu | bionic | * |
| Wolfssl | Ubuntu | disco | * |
| Wolfssl | Ubuntu | eoan | * |
| Wolfssl | Ubuntu | trusty | * |
| Wolfssl | Ubuntu | upstream | * |
| Wolfssl | Ubuntu | xenial | * |