CVE:CVE-2013-1623
CNNVD:CNNVD-201302-155
wolfSSL CyaSSL 2.5.0之前版本中的TLS和DTLS实现中存在漏洞，该漏洞源于程序在处理畸形的CBC填充期间没有正确地研究针对固执的MAC地址检查操作所进行的计时边信道攻击。通过对特制报文的计时数据的统计分析，远程攻击者可利用该漏洞实施区分攻击以及明文恢复攻击。
solution:Upgrade yassl cyassl to a higher version than 2.4.6,0.2.0,0.3.0,0.4.0,0.5.0,0.5.5,0.6.0,0.6.2,0.6.3,0.8.0,0.9.0,0.9.6,0.9.8,0.9.9,1.0.0:rc1,1.0.0:rc2,1.0.0:rc3,1.0.2,1.0.3,1.0.6,1.1.0,1.2.0,1.3.0,1.4.0,1.5.0,1.5.4,1.5.6,1.6.0,1.6.5,1.8.0,1.9.0,2.0.0:rc1,2.0.0:rc2,2.0.0:rc3,2.0.2,2.0.6,2.0.8,2.2.0,2.3.0,2.4.0,and avoid the version (,2.4.6],0.2.0,0.3.0,0.4.0,0.5.0,0.5.5,0.6.0,0.6.2,0.6.3,0.8.0,0.9.0,0.9.6,0.9.8,0.9.9,1.0.0:rc1,1.0.0:rc2,1.0.0:rc3,1.0.2,1.0.3,1.0.6,1.1.0,1.2.0,1.3.0,1.4.0,1.5.0,1.5.4,1.5.6,1.6.0,1.6.5,1.8.0,1.9.0,2.0.0:rc1,2.0.0:rc2,2.0.0:rc3,2.0.2,2.0.6,2.0.8,2.2.0,2.3.0,2.4.0