CVE-2019-19960: Medium severity wolfssl wolfmqtt vulnerability
Published Dec 24, 2019
·Updated
In wolfSSL before 4.3.0, wceccmulmodex does not properly resist side-channel attacks.
Affected Software
1 affected component
wolfSSL wolfssl<4.3.0
Remediation
Event History
Dec 24, 2019
CVE Published
via MITRE·11:04 PM
Data Sourced
via MITRE·11:04 PM
Description
Frequently Asked Questions
1
What is CVE-2019-19960?
CVE-2019-19960 is a vulnerability in wolfSSL before version 4.3.0 that allows side-channel attacks to occur.
2
How severe is CVE-2019-19960?
CVE-2019-19960 has a severity rating of 5.3 (medium).
3
What is affected by CVE-2019-19960?
wolfSSL versions up to and excluding 4.3.0 are affected by CVE-2019-19960.
4
How can I fix CVE-2019-19960?
To fix CVE-2019-19960, update to at least version 4.3.0 of wolfSSL.
5
Where can I find more information about CVE-2019-19960?
You can find more information about CVE-2019-19960 at these references: [1](https://github.com/wolfSSL/wolfssl/commit/5ee9f9c7a23f8ed093fe1e42bc540727e96cebb8) and [2](https://github.com/wolfSSL/wolfssl/releases/tag/v4.3.0-stable).