CVE-2024-1545

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.0-stable	Release Notes

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:wolfssl:wolfssl:5.6.6:*:*:*:*:*:*:*

OR	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

04 Sep 2024, 14:27

Type	Values Removed	Values Added
First Time		Linux linux Kernel Microsoft windows Microsoft Wolfssl Linux Wolfssl wolfssl
Summary		(es) La vulnerabilidad de inyección de fallas en la función RsaPrivateDecryption en wolfssl/wolfcrypt/src/rsa.c en WolfSSL wolfssl5.6.6 en Linux/Windows permite a un atacante remoto residir en el mismo sistema con un proceso víctima para divulgar información y escalar privilegios a través de la inyección de fallas de Rowhammer a la estructura RsaKey.
CPE		cpe:2.3:a:wolfssl:wolfssl:5.6.6:::::::* cpe:2.3:o:microsoft:windows:-:::::::* cpe:2.3:o:linux:linux_kernel:-:::::::*
CWE		CWE-74
CVSS	v2 : ~~unknown~~ v3 : ~~5.9~~	v2 : unknown v3 : 8.8
References	~~() https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.0-stable -~~	() https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.0-stable - Release Notes

29 Aug 2024, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-29 23:15

Updated : 2024-09-04 14:27

NVD link : CVE-2024-1545

Mitre link : CVE-2024-1545

CVE.ORG link : CVE-2024-1545

JSON object : View

Products Affected

linux

linux_kernel

wolfssl

wolfssl

microsoft

windows

CWE

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1256

Hardware Features Enable Physical Attacks from Software

CWE-252

Unchecked Return Value

{"id": "CVE-2024-1545", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "facts@wolfssl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 1.2}]}, "published": "2024-08-29T23:15:10.263", "references": [{"url": "https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.0-stable", "tags": ["Release Notes"], "source": "facts@wolfssl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-74"}]}, {"type": "Secondary", "source": "facts@wolfssl.com", "description": [{"lang": "en", "value": "CWE-1256"}, {"lang": "en", "value": "CWE-252"}]}], "descriptions": [{"lang": "en", "value": "Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker\u00a0co-resides in the same system with a victim process to\u00a0disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure."}, {"lang": "es", "value": "La vulnerabilidad de inyecci\u00f3n de fallas en la funci\u00f3n RsaPrivateDecryption en wolfssl/wolfcrypt/src/rsa.c en WolfSSL wolfssl5.6.6 en Linux/Windows permite a un atacante remoto residir en el mismo sistema con un proceso v\u00edctima para divulgar informaci\u00f3n y escalar privilegios a trav\u00e9s de la inyecci\u00f3n de fallas de Rowhammer a la estructura RsaKey."}], "lastModified": "2024-09-04T14:27:08.060", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wolfssl:wolfssl:5.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1324CF72-54B2-4CEA-A160-47EE84B56035"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "facts@wolfssl.com"}