Description
wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults
associated with the Chinese Remainder Theorem (CRT) process when allowing
ephemeral key exchange without low memory optimizations on a server, which
makes it easier for remote attackers to obtain private RSA keys by
capturing TLS handshakes, aka a Lenstra attack.
Notes
tyhicks> affects MySQL 5.5.45 and earlier, 5.6.26 and earlier
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Trusty/esm: | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | not-affected
(10.0.22-0ubuntu1)
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
| Ubuntu 19.10 (Eoan): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Trusty/esm: | DNE
(trusty was released [5.5.46-1ubuntu0.14.04.2])
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
| Ubuntu 19.10 (Eoan): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | released
(5.5.46-0ubuntu0.12.04.2)
|
| Trusty/esm: | released
(5.5.46-0ubuntu0.14.04.2)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
| Ubuntu 19.10 (Eoan): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Trusty/esm: | DNE
(trusty was released [5.6.27-0ubuntu0.14.04.1])
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
| Ubuntu 19.10 (Eoan): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Trusty/esm: | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | needed
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
| Ubuntu 19.10 (Eoan): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Trusty/esm: | DNE
(trusty was needed)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
| Ubuntu 19.10 (Eoan): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Trusty/esm: | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | released
(5.6.34-26.19-0ubuntu0.16.04.1)
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
| Ubuntu 19.10 (Eoan): | DNE
|
Updated: 2019-04-26 14:15:36 UTC (commit 30899e40836d26e1bb5f0b072d31fd87b6cf3bd4)