Vulnerability · Published Mar 19, 2026 · Assigned by wolfSSL
CVE-2026-3230Improper key_share validation in TLS 1.3 HelloRetryRequest
Low 1.2
In plain English
A low-severity improper input validation in wolfSSL from wolfSSL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communications via a crafted HelloRetryRequest followed by a ServerHello message that omits the required key_share extension, resulting in derivation of predictable traffic secrets from (EC)DHE shared secret. This issue does not affect the client's authentication of the server during TLS handshakes.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.23 | wolfssl | 5.9.1-r0 | ALPINE-CVE-2026-3230 |
| Alpine:v3.24 | wolfssl | 5.9.0-r0 | ALPINE-CVE-2026-3230 |
| Debian:12 | wolfssl | no fix listed | DEBIAN-CVE-2026-3230 |
| Debian:13 | wolfssl | no fix listed | DEBIAN-CVE-2026-3230 |
| Ubuntu:22.04:LTS | wolfssl | no fix listed | UBUNTU-CVE-2026-3230 |
| Ubuntu:24.04:LTS | wolfssl | no fix listed | UBUNTU-CVE-2026-3230 |
| Ubuntu:25.10 | wolfssl | no fix listed | UBUNTU-CVE-2026-3230 |
| Ubuntu:26.04:LTS | wolfssl | no fix listed | UBUNTU-CVE-2026-3230 |
Affected products (as reported)
Weakness: CWE-20 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/AU:Y/R:A/V:D/U:Clear