Critical Fault Injection Vulnerability in WolfSSL Package
Summary
DEBIAN-CVE-2024-1545: Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclos... Affects wolfssl versions < 5.7.0-0.3. Fixed in 5.7.0-0.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
WolfSSL is a lightweight SSL/TLS library targeted for embedded and RTOS environments. It provides secure communication protocols and cryptographic functions, making it widely used in various applications, including IoT devices and secure servers. However, the library has been found to be vulnerable to a fault injection attack, which could compromise its security.
Vulnerability Detail
The vulnerability, identified as DEBIAN-CVE-2024-1545, is a Fault Injection issue in the RsaPrivateDecryption function located in wolfssl/wolfcrypt/src/rsa.c. This flaw allows a remote attacker, who shares the same system with a victim process, to exploit Rowhammer fault injection techniques to disclose sensitive information and potentially escalate privileges. The vulnerability affects versions of WolfSSL prior to 5.7.0-0.3.
How To Fix
Minimum fixed version
5.7.0-0.3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wolfsslTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can isolate the affected application from other processes on the same system to mitigate the risk of an attacker exploiting this vulnerability. Additionally, consider using hardware that is less susceptible to Rowhammer attacks.
Conclusion
The Fault Injection vulnerability in the WolfSSL package poses significant risks, allowing attackers to exploit Rowhammer techniques for unauthorized access. It is crucial for users to update to the patched version to mitigate these risks and ensure the security of their applications.
See every vulnerability recorded for wolfssl →
FAQ
The vulnerability is a Fault Injection issue that allows attackers to exploit Rowhammer techniques to gain unauthorized access to sensitive information.
Versions of WolfSSL prior to 5.7.0-0.3 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Update your WolfSSL package to version 5.7.0-0.3 or later to secure your application against this vulnerability.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for wolfssl.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
