CVE-2025-11935

With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS (perfect forward secrecy) and the client would continue on with the connection using PSK without PFS. This happened when a server responded to a ClientHello containing psk_dhe_ke without a key_share extension. The re-use of an authenticated PSK connection that on the clients side unexpectedly did not have PFS, reduces the security of the connection.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/wolfSSL/wolfssl	Product
https://github.com/wolfSSL/wolfssl/pull/9112	Issue Tracking Patch

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:linux:linux_kernel:-:::::::*

History

19 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Con la clave precompartida (PSK) de TLS 1.3, un servidor malicioso o defectuoso podría ignorar la solicitud de PFS (secreto hacia adelante perfecto) y el cliente continuaría con la conexión usando PSK sin PFS. Esto ocurrió cuando un servidor respondió a un ClientHello que contenía psk_dhe_ke sin una extensión key_share. La reutilización de una conexión PSK autenticada que del lado del cliente inesperadamente no tenía PFS, reduce la seguridad de la conexión.

Information

Published : 2025-11-21 22:16

Updated : 2026-10-19 13:10

NVD link : CVE-2025-11935

Mitre link : CVE-2025-11935

CVE.ORG link : CVE-2025-11935

JSON object : View

Products Affected

linux

linux_kernel

apple

macos

wolfssl

wolfssl

CWE

CWE-326

Inadequate Encryption Strength

{"id": "CVE-2025-11935", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11935", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-25T18:43:57.465371Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "facts@wolfssl.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "facts@wolfssl.com", "affectedData": [{"repo": "https://github.com/wolfSSL/wolfssl", "vendor": "wolfSSL", "modules": ["TLS"], "product": "wolfSSL", "versions": [{"status": "affected", "version": "3.12.0", "lessThan": "5.8.4", "versionType": "git"}], "platforms": ["Linux", "MacOS"], "packageName": "wolfssl", "programFiles": ["src/tls13.c", "src/tls.c", "wolfssl/internal.h"], "collectionURL": "https://www.wolfssl.com/download", "defaultStatus": "unaffected"}]}], "published": "2025-11-21T22:16:18.920", "references": [{"url": "https://github.com/wolfSSL/wolfssl", "tags": ["Product"], "source": "facts@wolfssl.com"}, {"url": "https://github.com/wolfSSL/wolfssl/pull/9112", "tags": ["Issue Tracking", "Patch"], "source": "facts@wolfssl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "facts@wolfssl.com", "description": [{"lang": "en", "value": "CWE-326"}]}], "descriptions": [{"lang": "en", "value": "With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS (perfect forward secrecy) and the client would continue on with the connection using PSK without PFS. This happened when a\u00a0server responded to a ClientHello containing psk_dhe_ke without a key_share extension.\u00a0The re-use of an authenticated PSK connection that on the clients side unexpectedly did not have PFS, reduces the security of the connection."}, {"lang": "es", "value": "Con la clave precompartida (PSK) de TLS 1.3, un servidor malicioso o defectuoso podr\u00eda ignorar la solicitud de PFS (secreto hacia adelante perfecto) y el cliente continuar\u00eda con la conexi\u00f3n usando PSK sin PFS. Esto ocurri\u00f3 cuando un servidor respondi\u00f3 a un ClientHello que conten\u00eda psk_dhe_ke sin una extensi\u00f3n key_share. La reutilizaci\u00f3n de una conexi\u00f3n PSK autenticada que del lado del cliente inesperadamente no ten\u00eda PFS, reduce la seguridad de la conexi\u00f3n."}], "lastModified": "2026-10-19T13:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB81B784-14DD-4CD0-859A-62D42ADDD7D3", "versionEndExcluding": "5.8.4", "versionStartIncluding": "5.8.2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "facts@wolfssl.com"}