The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Aug 30, 2017 | Oct 25, 2016 |
| Debian | — | Upgrade mysql-5.5Upgrade wolfssl | Nov 11, 2016 | Nov 11, 2016 |
| Freebsd | — | Upgrade mysql57-serverUpgrade mysql55-serverUpgrade mysql56-serverUpgrade mariadb55-server | Nov 14, 2016 | Nov 1, 2016 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Dec 13, 2016 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 3.9.10 | Dec 19, 2016 | Dec 13, 2016 |
| Oracle Solaris | — | Upgrade runtime/perl-threaded-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-56/client to version 5.6.37-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-56 to version 5.6.37-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-55/tests to version 5.5.57-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-57/library to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-56/library to version 5.6.37-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-55/library to version 5.5.57-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-57 to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-55/client to version 5.5.57-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-57/embedded to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-56/tests to version 5.6.37-0.175.3.25.0.1.0 on Solaris 11.3Upgrade database/mysql-57/tests to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3Upgrade database/mysql-55 to version 5.5.57-0.175.3.25.0.1.0 on Solaris 11.3Upgrade runtime/perl-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade database/mysql-57/client to version 5.7.23-0.175.3.35.0.5.0 on Solaris 11.3 | May 29, 2017 | Dec 13, 2016 |
| Suse | — | Upgrade libmysql55client18-32bitUpgrade mysql-toolsUpgrade libmysqlclient_r18-32bitUpgrade mysqlUpgrade libmysqlclient_r18Upgrade libmysql55client_r18Upgrade libmysqld-develUpgrade libmysql55client18Upgrade libmysql55client_r18-x86Upgrade libmysqld18Upgrade libmysqlclient18Upgrade libmysql55client_r18-32bitUpgrade mariadb-100-errormessagesUpgrade libmariadbd-develUpgrade mysql-clientUpgrade libmariadbd19Upgrade mariadb-errormessagesUpgrade libmysqlclient-develUpgrade libmysqld19Upgrade mariadbUpgrade mariadb-toolsUpgrade libmysql55client18-x86Upgrade libmysqlclient18-32bitUpgrade mariadb-client | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | — | Upgrade mysql-server-5.7Upgrade mysql-server-5.5 | Jul 1, 2017 | Oct 25, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub