CVE catalog
CVE-2023-6935
wolfssl: CVE-2023-6935
- Severity
- Low
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.54% · Oct 25, 2026
wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure: --enable-all CFLAGS="-DWOLFSSL_STATIC_RSA" The define “WOLFSSL_STATIC_RSA” enables static RSA cipher suites, which is not recommended, and has been disabled by default since wolfSSL 3.6.6. Therefore the default build since 3.6.6, even with "--enable-all", is not vulnerable to the Marvin Attack. The vulnerability is specific to static RSA cipher suites, and expected to be padding-independent. The vulnerability allows an attacker to decrypt ciphertexts and forge signatures after probing with a large number of test observations. However the server’s private key is not exposed.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | wolfssl | sid | 5.9.2-1.2 | fixed |
| Debian | wolfssl | trixie | 5.7.2-0.1+deb13u2 | fixed |
| Debian | wolfssl | bookworm | 5.5.4-2+deb12u2 | vulnerable |
| Debian | wolfssl | bookworm-security | 5.5.4-2+deb12u3 | vulnerable |
| Ubuntu | wolfssl | 16.04 | 3.4.8+dfsg-1 | vulnerable |
| Ubuntu | wolfssl | 18.04 | 3.10.2+dfsg-2 | vulnerable |
| Ubuntu | wolfssl | 18.04 | 3.12.0+dfsg-1 | vulnerable |
| Ubuntu | wolfssl | 18.04 | 3.12.2+dfsg-1 | vulnerable |
| Ubuntu | wolfssl | 18.04 | 3.13.0+dfsg-1 | vulnerable |
| Ubuntu | wolfssl | 20.04 | 4.1.0+dfsg-2 | vulnerable |
| Ubuntu | wolfssl | 20.04 | 4.2.0+dfsg-1 | vulnerable |
| Ubuntu | wolfssl | 20.04 | 4.2.0+dfsg-2 | vulnerable |
| Ubuntu | wolfssl | 20.04 | 4.2.0+dfsg-3 | vulnerable |
| Ubuntu | wolfssl | 20.04 | 4.3.0+dfsg-2 | vulnerable |
| Ubuntu | wolfssl | 22.04 | 4.6.0-3 | vulnerable |
| Ubuntu | wolfssl | 22.04 | 5.0.0-1 | vulnerable |
| Ubuntu | wolfssl | 22.04 | 5.1.1-1 | vulnerable |
| Ubuntu | wolfssl | 22.04 | 5.2.0-1 | vulnerable |
| Ubuntu | wolfssl | 22.04 | 5.2.0-2 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.