Description
wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults
associated with the Chinese Remainder Theorem (CRT) process when allowing
ephemeral key exchange without low memory optimizations on a server, which
makes it easier for remote attackers to obtain private RSA keys by
capturing TLS handshakes, aka a Lenstra attack.
Notes
tyhicks> affects MySQL 5.5.45 and earlier, 5.6.26 and earlier
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | not-affected
(10.0.22-0ubuntu1)
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | released
(5.5.46-1ubuntu0.14.04.2)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | released
(5.5.46-0ubuntu0.12.04.2)
|
| Ubuntu 14.04 LTS (Trusty Tahr): | released
(5.5.46-0ubuntu0.14.04.2)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | released
(5.6.27-0ubuntu0.14.04.1)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | needed
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | needed
|
| Ubuntu 16.04 LTS (Xenial Xerus): | DNE
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
Package
| Upstream: | needs-triage
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
|
| Ubuntu 14.04 LTS (Trusty Tahr): | DNE
|
| Ubuntu 16.04 LTS (Xenial Xerus): | released
(5.6.34-26.19-0ubuntu0.16.04.1)
|
| Ubuntu 18.04 LTS (Bionic Beaver): | DNE
|
| Ubuntu 18.10 (Cosmic Cuttlefish): | DNE
|
| Ubuntu 19.04 (Disco Dingo): | DNE
|
Updated: 2019-01-14 21:17:43 UTC (commit 51f9b73af244ba86b9321e46e526586c25a8e060)