Nixpkgs security tracker
NIXPKGS-2026-1042
GitHub issue
published 2 months, 2 weeks ago
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse accepted
- @LeSuisse published on GitHub
PKCS7 CBC Padding Oracle — Plaintext Recovery
A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.
Affected products
wolfSSL
- =<5.9.0
Package maintainers
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@vifino Adrian Pistol <vifino@tty.sh>