CVE-2020-11713 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 59%

Vendor	Product	Version
wolfssl	wolfssl	4.3.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

wolfssl

bullseye	4.6.0+p1-0+deb11u2 fixed
bookworm	5.5.4-2+deb12u1 fixed
sid	5.7.2-0.1 fixed
trixie	5.7.2-0.1 fixed

Ubuntu Releases

Ubuntu Product

Codename

wolfssl

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	not-affected
groovy	not-affected
focal	needs-triage
eoan	ignored
bionic	needs-triage
xenial	needs-triage
trusty	dne

Known Exploits!

Common Weakness Enumeration

CWE-203 - Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References

https://gist.github.com/pietroborrello/7c5be2d1dc15349c4ffc8671f0aad04f

https://github.com/wolfSSL/wolfssl/pull/2894/

https://gist.github.com/pietroborrello/7c5be2d1dc15349c4ffc8671f0aad04f

https://github.com/wolfSSL/wolfssl/pull/2894/