Vulnerability · Published Aug 29, 2024 · Assigned by wolfSSL

CVE-2024-2881Fault Injection of EdDSA signature in WolfCrypt

Medium 6.7

In plain English

A medium-severity security flaw in wolfCrypt from WolfSSL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.7Medium

Exploit odds (30 days)0.5%top 59.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	wolfssl	no fix listed	DEBIAN-CVE-2024-2881
Debian:13	wolfssl	5.7.0-0.3	DEBIAN-CVE-2024-2881
Ubuntu:22.04:LTS	wolfssl	no fix listed	UBUNTU-CVE-2024-2881
Ubuntu:24.04:LTS	wolfssl	no fix listed	UBUNTU-CVE-2024-2881

Affected products (as reported)

Vendor	Product	Versions
WolfSSL	wolfCrypt	0 – through 5.6.6

Weakness: CWE-1256, CWE-252 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

References

https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.0-stable