Vulnerability Details : CVE-2023-6935
wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure:
--enable-all CFLAGS="-DWOLFSSL_STATIC_RSA"
The define “WOLFSSL_STATIC_RSA” enables static RSA cipher suites, which is not recommended, and has been disabled by default since wolfSSL 3.6.6. Therefore the default build since 3.6.6, even with "--enable-all", is not vulnerable to the Marvin Attack. The vulnerability is specific to static RSA cipher suites, and expected to be padding-independent.
The vulnerability allows an attacker to decrypt ciphertexts and forge signatures after probing with a large number of test observations. However the server’s private key is not exposed.
Products affected by CVE-2023-6935
- cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-6935
0.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 39 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-6935
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.9
|
MEDIUM | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
2.2
|
3.6
|
wolfSSL Inc. | 2024-02-10 |
5.9
|
MEDIUM | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
2.2
|
3.6
|
NIST | 2024-11-07 |
CWE ids for CVE-2023-6935
-
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.Assigned by:
- facts@wolfssl.com (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2023-6935
-
https://people.redhat.com/~hkario/marvin/
The Marvin AttackTechnical Description
-
https://www.wolfssl.com/docs/security-vulnerabilities/
wolfSSL Security Vulnerabilities | wolfSSL Embedded SSL/TLS LibraryVendor Advisory
Jump to