tocsin

Debian/wolfssl: medium 6.5

PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. The PKCS#12 verify path compared the loca

Action: Upgrade wolfssl to 5.7.2-0.1+deb13u2 or later.

Affected

introducedfixedlast affected
05.7.2-0.1+deb13u2-

Fixed versions

5.7.2-0.1+deb13u2

Sources

published · modified · JSON