CVE-2018-16870

MEDIUM

wolfssl <3.15.7 - Info Disclosure

Title source: llm

Description

It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to leakage of sensible data.

References (2)

Scores

CVSS v3 5.9
EPSS 0.0019
EPSS Percentile 40.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-310 CWE-200
Status published
Products (1)
wolfssl/wolfssl < 3.15.7
Published Jan 03, 2019
Tracked Since Feb 18, 2026