tocsin

Alpine/wolfssl: medium 6.5

PKCS#12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. The PKCS#12 verify path compared the loca

Action: Upgrade wolfssl to 5.9.2-r0 or later.

Affected

introducedfixedlast affected
3.10.05.9.2-r0-

Fixed versions

5.9.2-r0

Sources

published · modified · JSON