VYPR
← All advisories
Medium severity5.1NVD Advisory· Published Aug 27, 2024· Updated Jun 17, 2026

CVE-2024-5288

CVE-2024-5288

Description

An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with private ECC keys,

such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • WolfSSL/Wolfssl3 versions
    cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*range: <5.7.2
    • (no CPE)range: <5.7.0
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.