CVE-2021-24116
14.07.2021, 13:15
In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.Enginsight
| Vendor | Product | Version |
|---|---|---|
| wolfssl | wolfssl | 𝑥 < 4.6.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases