In versions of wolfSSL prior to 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine.
Debian Bug report logs -
#856114
wolfssl: CVE-2017-6076
Package:
src:wolfssl;
Maintainer for src:wolfssl is Felix Lechner <felixlechner@lease-upcom>;
Reported by: Salvatore Bonaccorso <carnil@debianorg>
Date: Sat, 25 Feb 2017 10:30:01 UTC
Severity: grave
Tags: fixed-upstream, patch, security, upstream
Found in ve ...
Vulmon