4.3

CVE-2013-1623

The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.

Data is provided by the National Vulnerability Database (NVD)
Yassl ≫ Cyassl Version <= 2.4.6
Yassl ≫ Cyassl Version0.2.0
Yassl ≫ Cyassl Version0.3.0
Yassl ≫ Cyassl Version0.4.0
Yassl ≫ Cyassl Version0.5.0
Yassl ≫ Cyassl Version0.5.5
Yassl ≫ Cyassl Version0.6.0
Yassl ≫ Cyassl Version0.6.2
Yassl ≫ Cyassl Version0.6.3
Yassl ≫ Cyassl Version0.8.0
Yassl ≫ Cyassl Version0.9.0
Yassl ≫ Cyassl Version0.9.6
Yassl ≫ Cyassl Version0.9.8
Yassl ≫ Cyassl Version0.9.9
Yassl ≫ Cyassl Version1.0.0 Updaterc1
Yassl ≫ Cyassl Version1.0.0 Updaterc2
Yassl ≫ Cyassl Version1.0.0 Updaterc3
Yassl ≫ Cyassl Version1.0.2
Yassl ≫ Cyassl Version1.0.3
Yassl ≫ Cyassl Version1.0.6
Yassl ≫ Cyassl Version1.1.0
Yassl ≫ Cyassl Version1.2.0
Yassl ≫ Cyassl Version1.3.0
Yassl ≫ Cyassl Version1.4.0
Yassl ≫ Cyassl Version1.5.0
Yassl ≫ Cyassl Version1.5.4
Yassl ≫ Cyassl Version1.5.6
Yassl ≫ Cyassl Version1.6.0
Yassl ≫ Cyassl Version1.6.5
Yassl ≫ Cyassl Version1.8.0
Yassl ≫ Cyassl Version1.9.0
Yassl ≫ Cyassl Version2.0.0 Updaterc1
Yassl ≫ Cyassl Version2.0.0 Updaterc2
Yassl ≫ Cyassl Version2.0.0 Updaterc3
Yassl ≫ Cyassl Version2.0.2
Yassl ≫ Cyassl Version2.0.6
Yassl ≫ Cyassl Version2.0.8
Yassl ≫ Cyassl Version2.2.0
Yassl ≫ Cyassl Version2.3.0
Yassl ≫ Cyassl Version2.4.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.94% 0.74
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N