CVE-2018-16870 - AskarLabs CVE Database

CVE-2018-16870

Vendor N/A

Product wolfssl

Weakness CWE-200 · Info exposure

Published January 3, 2019

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to leakage of sensible data.

Key dates

02Disclosure timeline

January 3, 2019 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-16870 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2025-49824 conda-smithy Insecure Encryption Vulnerable to Oracle Padding Attack CVE-2023-47642 Stream description leaks to ex-subscribers in Zulip CVE-2025-54586 GitProxy is susceptible to a hidden commits injection attack CVE-2023-28900 Nickname Disclosure on the Backend Automotive Server CVE-2026-40166 authentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/