Skip to content

CVE-2020-36177

CVE-2020-36177

This page contains facts from public vulnerability sources. Check the original advisory before updating.

RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.

CVSS 9.8 · Critical · EPSS 3.6% · Fix available

Published: 2021-01-06T15:54:40.000Z
Updated: 2024-08-04T17:23:09.291Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
wolfssl Debian:12
Affected ranges
- ECOSYSTEM: < 4.6.0-1
Update to 4.6.0-1
wolfssl Debian:13
Affected ranges
- ECOSYSTEM: < 4.6.0-1
Update to 4.6.0-1
wolfssl Ubuntu:16.04:LTS
Versions
- 3.4.8+dfsg-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wolfssl Ubuntu:18.04:LTS
Versions
- 3.10.2+dfsg-2
- 3.12.0+dfsg-1
- 3.12.2+dfsg-1
- 3.13.0+dfsg-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wolfssl Ubuntu:20.04:LTS
Versions
- 4.1.0+dfsg-2
- 4.2.0+dfsg-1
- 4.2.0+dfsg-2
- 4.2.0+dfsg-3
- 4.3.0+dfsg-2
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wolfssl Ubuntu:22.04:LTS
Versions
- 4.6.0-3
- 5.0.0-1
- 5.1.1-1
- 5.2.0-1
- 5.2.0-2
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wolfssl Ubuntu:24.04:LTS
Versions
- 5.5.4-2
- 5.5.4-2.1
- 5.6.4-2
- 5.6.6-1.2
- 5.6.6-1.3
- 5.6.6-1.3build1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wolfssl Ubuntu:25.10
Versions
- 5.7.2-0.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wolfssl Ubuntu:26.10
Versions
- 5.9.1-0.1
- 5.9.2-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wolfssl Ubuntu:26.04:LTS
Versions
- 5.7.2-0.1
- 5.8.2-1.2
- 5.8.4-1
- 5.9.1-0.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published

Original sources

Check your server →