cve/2023/CVE-2023-6935.md

### [CVE-2023-6935](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6935)
![](https://img.shields.io/static/v1?label=Product&message=wolfSSL&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=3.12.2%3C%3D%205.6.4%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-203%20Observable%20Discrepancy&color=brighgreen)

### Description

wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure:--enable-all CFLAGS="-DWOLFSSL_STATIC_RSA"The define “WOLFSSL_STATIC_RSA” enables static RSA cipher suites, which is not recommended, and has been disabled by default since wolfSSL 3.6.6.  Therefore the default build since 3.6.6, even with "--enable-all", is not vulnerable to the Marvin Attack. The vulnerability is specific to static RSA cipher suites, and expected to be padding-independent.The vulnerability allows an attacker to decrypt ciphertexts and forge signatures after probing with a large number of test observations. However the server’s private key is not exposed.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/wolfSSL/Arduino-wolfSSL
- https://github.com/wolfSSL/wolfssl