wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Aug 30, 2017 | Jan 20, 2016 |
| Debian | — | Upgrade mysql-5.5Upgrade wolfssl | Jul 30, 2024 | Jan 22, 2016 |
| Freebsd | — | Upgrade wolfssl | Dec 10, 2025 | Jan 5, 2016 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Jan 22, 2016 |
| Oracle Solaris | — | Upgrade database/mysql-55/tests to version 5.5.48-0.175.3.7.0.4.0 on Solaris 11.3Upgrade database/mysql-55 to version 5.5.48-0.175.3.7.0.4.0 on Solaris 11.3 | May 29, 2017 | Jan 22, 2016 |
| Oracle_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb-benchUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-devel | Apr 7, 2016 | Jan 22, 2016 |
| Suse | — | Upgrade mysql-toolsUpgrade libmariadbd19Upgrade libmariadbd-develUpgrade libmysql55client_r18-x86Upgrade libmysql55client18Upgrade libmysql55client_r18-32bitUpgrade libmysqld-develUpgrade mysqlUpgrade mariadb-clientUpgrade libmysqld19Upgrade mysql-clientUpgrade mariadbUpgrade libmysql55client18-32bitUpgrade mariadb-errormessagesUpgrade libmysql55client18-x86Upgrade libmysql55client_r18Upgrade mariadb-tools | Feb 5, 2016 | Jan 22, 2016 |
| Ubuntu | — | Upgrade mariadb-5.5Upgrade mysql-5.6Upgrade percona-xtradb-cluster-5.6Upgrade mysql-5.5 | Nov 19, 2024 | Jan 22, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub