wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published: 2017-12-13T01:00:00Z

Updated: 2024-09-16T17:08:12.140Z

Reserved: 2017-08-22T00:00:00

Link: CVE-2017-13099

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2017-12-13T01:29:00.343

Modified: 2024-11-21T03:10:58.010

Link: CVE-2017-13099

cve-icon Redhat

No data.