Alpine/wolfssl: high 7.5
An integer overflow existed in the wolfCrypt CMAC implementation, that could be exploited to forge CMAC tags. The function wc_CmacUpdate used the guard `if (cmac->totalSz != 0)` to skip XOR-chaining o
Action: Upgrade wolfssl to 5.9.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.9.1-r0 | - |
Fixed versions
| 5.9.1-r0 |
Sources
published · modified · JSON