Cache Timing Vulnerability in wolfSSL Prior to Version 4.5.0

CVE-2020-15309

Summary

A cache timing vulnerability exists in wolfSSL prior to version 4.5.0, which can be exploited by local attackers to launch cache-timing attacks against public key operations. If the affected system has been involved in private key operations, such as signing, attackers may be able to obtain sensitive information. This vulnerability highlights the importance of using single precision for enhanced security in cryptographic operations.

References