Vulnerability · Published Feb 9, 2024 · Assigned by wolfSSL
CVE-2023-6935Marvin Attack vulnerability in SP Math All RSA
Medium 5.9
In plain English
A medium-severity security flaw in wolfSSL from wolfSSL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure: --enable-all CFLAGS="-DWOLFSSL_STATIC_RSA" The define “WOLFSSL_STATIC_RSA” enables static RSA cipher suites, which is not recommended, and has been disabled by default since wolfSSL 3.6.6. Therefore the default build since 3.6.6, even with "--enable-all", is not vulnerable to the Marvin Attack. The vulnerability is specific to static RSA cipher suites, and expected to be padding-independent. The vulnerability allows an attacker to decrypt ciphertexts and forge signatures after probing with a large number of test observations. However the server’s private key is not exposed.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | wolfssl | 5.6.6-r0 | ALPINE-CVE-2023-6935 |
| Alpine:v3.21 | wolfssl | 5.6.6-r0 | ALPINE-CVE-2023-6935 |
| Alpine:v3.22 | wolfssl | 5.6.6-r0 | ALPINE-CVE-2023-6935 |
| Alpine:v3.23 | wolfssl | 5.6.6-r0 | ALPINE-CVE-2023-6935 |
| Alpine:v3.24 | wolfssl | 5.6.6-r0 | ALPINE-CVE-2023-6935 |
| Debian:12 | wolfssl | no fix listed | DEBIAN-CVE-2023-6935 |
| Debian:13 | wolfssl | 5.6.6-1.2 | DEBIAN-CVE-2023-6935 |
| Ubuntu:22.04:LTS | wolfssl | no fix listed | UBUNTU-CVE-2023-6935 |
Affected products (as reported)
Weakness: CWE-203 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://people.redhat.com/~hkario/marvin/ technical-description, third-party-advisory
- https://www.wolfssl.com/docs/security-vulnerabilities/