The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-mariadb | Aug 30, 2017 | Oct 25, 2016 |
| Debian | debian-upgrade-mysql-5-5debian-upgrade-wolfssl | Nov 11, 2016 | Nov 11, 2016 | |
| Freebsd | freebsd-upgrade-package-mariadb55-serverfreebsd-upgrade-package-mysql55-serverfreebsd-upgrade-package-mysql56-serverfreebsd-upgrade-package-mysql57-server | Nov 14, 2016 | Nov 1, 2016 | |
| Mariadb Mariadb | mariadb-mariadb-upgrade-latest | Mar 4, 2025 | Dec 13, 2016 | |
| Oracle Mysql | mysql-upgrade-3_9_10 | Dec 19, 2016 | Dec 13, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-database-mysql-55-5-5-57-0-175-3-25-0-1-0oracle-solaris-11-3-upgrade-database-mysql-55-client-5-5-57-0-175-3-25-0-1-0oracle-solaris-11-3-upgrade-database-mysql-55-library-5-5-57-0-175-3-25-0-1-0oracle-solaris-11-3-upgrade-database-mysql-55-tests-5-5-57-0-175-3-25-0-1-0oracle-solaris-11-3-upgrade-database-mysql-56-5-6-37-0-175-3-25-0-1-0oracle-solaris-11-3-upgrade-database-mysql-56-client-5-6-37-0-175-3-25-0-1-0oracle-solaris-11-3-upgrade-database-mysql-56-library-5-6-37-0-175-3-25-0-1-0oracle-solaris-11-3-upgrade-database-mysql-56-tests-5-6-37-0-175-3-25-0-1-0oracle-solaris-11-3-upgrade-database-mysql-57-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-client-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-embedded-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-library-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-tests-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-runtime-perl-512-5-12-5-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-runtime-perl-threaded-512-5-12-5-0-175-3-19-0-2-0 | May 29, 2017 | Dec 13, 2016 | |
| Suse | — | suse-upgrade-libmariadbd-develsuse-upgrade-libmariadbd19suse-upgrade-libmysql55client18suse-upgrade-libmysql55client18-32bitsuse-upgrade-libmysql55client18-x86suse-upgrade-libmysql55client_r18suse-upgrade-libmysql55client_r18-32bitsuse-upgrade-libmysql55client_r18-x86suse-upgrade-libmysqlclient-develsuse-upgrade-libmysqlclient18suse-upgrade-libmysqlclient18-32bitsuse-upgrade-libmysqlclient_r18suse-upgrade-libmysqlclient_r18-32bitsuse-upgrade-libmysqld-develsuse-upgrade-libmysqld18suse-upgrade-libmysqld19suse-upgrade-mariadbsuse-upgrade-mariadb-100-errormessagessuse-upgrade-mariadb-clientsuse-upgrade-mariadb-errormessagessuse-upgrade-mariadb-toolssuse-upgrade-mysqlsuse-upgrade-mysql-clientsuse-upgrade-mysql-tools | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | ubuntu-upgrade-mysql-server-5-5ubuntu-upgrade-mysql-server-5-7 | Jul 1, 2017 | Oct 25, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub