crítica
CVE-2026-5194
wolfSSL: wolfSSL: Reduced security of ECDSA authentication via missing digest size checks
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Red Hat10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Julia9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:L/SA:L/U:Red
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat, Julia.
Descripción
Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions. This could lead to reduced security of ECDSA certificate-based authentication if the public CA key used is also known. This affects ECDSA/ECC verification when EdDSA or ML-DSA is also enabled.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | wolfSSL_jll | 5.9.2+0 |
| alpine 3.23 | wolfssl | 5.9.1-r0 |
| alpine 3.24 | wolfssl | 5.9.1-r0 |
| alpine edge | wolfssl | 5.9.1-r0 |
| debian 11 | wolfssl | sin corrección indicada |
| debian 12 | wolfssl | 5.5.4-2+deb12u3 |
| debian 13 | wolfssl | 5.7.2-0.1+deb13u2 |
| echo | wolfssl | 5.5.4-2+deb12u3 |
| rapidfort alpine 3.20 | wolfssl | 5.9.1-r0 |
| rapidfort alpine 3.21 | wolfssl | 5.9.1-r0 |
| rapidfort alpine 3.22 | wolfssl | 5.9.1-r0 |
| rapidfort debian 12 | wolfssl | 0:5.5.4-2+deb12u3, 0:5.7.2-0.1+deb13u2, 0:5.9.1-0.1 |
Mostrar las 13 entradas de 13 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | wolfSSL_jll | 5.9.2+0 |
| alpine 3.23 | wolfssl | 5.9.1-r0 |
| alpine 3.24 | wolfssl | 5.9.1-r0 |
| alpine edge | wolfssl | 5.9.1-r0 |
| debian 11 | wolfssl | sin corrección indicada |
| debian 12 | wolfssl | 5.5.4-2+deb12u3 |
| debian 13 | wolfssl | 5.7.2-0.1+deb13u2 |
| echo | wolfssl | 5.5.4-2+deb12u3 |
| rapidfort alpine 3.20 | wolfssl | 5.9.1-r0 |
| rapidfort alpine 3.21 | wolfssl | 5.9.1-r0 |
| rapidfort alpine 3.22 | wolfssl | 5.9.1-r0 |
| rapidfort debian 12 | wolfssl | 0:5.5.4-2+deb12u3, 0:5.7.2-0.1+deb13u2, 0:5.9.1-0.1 |
| rapidfort debian 13 | wolfssl | 0:5.5.4-2+deb12u3, 0:5.7.2-0.1+deb13u2, 0:5.9.1-0.1 |