CVE-2017-6076: wolfSSL

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine.

Affected products

• wolfSSL wolfSSL: before 3.10.2 (fixed in 3.10.2)

Published 2017-02-24. Last modified 2026-06-17.