Lucene search

K
cvelistRedhatCVELIST:CVE-2014-0076
HistoryMar 25, 2014 - 1:00 a.m.

CVE-2014-0076

2014-03-2501:00:00
redhat
raw.githubusercontent.com

5.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.