CVE 2020-36177

RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.

Related bugs and status

CVE-2020-36177 (Candidate) is related to these bugs:

Bug #1914474: wolfssl: Please update 20.10 (groovy) to version 4.6.0

Summary				In	Importance	Status
	1914474	wolfssl: Please update 20.10 (groovy) to version 4.6.0		wolfssl (Ubuntu)	Undecided	Confirmed

See the

CVE page on Mitre.org for more details.