Lucene search

K
cvelistMitreCVELIST:CVE-2004-2682
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2004-2682

2022-10-0316:14:14
mitre
www.cve.org
2
peersec matrixssl
rsa blinding
private key

6.2 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.4%

PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server’s private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms (“Karatsuba” and normal), a related issue to CVE-2003-0147.

6.2 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.4%