Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-0076HistoryMar 25, 2014 - 1:25 p.m.
CVE-2014-0076
2014-03-2513:25:21
Debian Security Bug Tracker
security-tracker.debian.org
20
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0005 Low
EPSS
Percentile
17.0%
The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.1g-1 | openssl_1.0.1g-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.1g-1 | openssl_1.0.1g-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.1g-1 | openssl_1.0.1g-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.1g-1 | openssl_1.0.1g-1_all.deb |
Related
cve
cve
CVE-2014-0076
2014-03-25 13:25:21
threatpost
threatpost
Second NSA Crypto Tool Found in RSA BSafe
2014-03-31 15:59:27
prion
prion
Design/Logic Flaw
2014-03-25 13:25:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:0541-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0539-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0538-1)
2021-06-09 00:00:00
cvelist
cvelist
CVE-2014-0076
2014-03-25 01:00:00
veracode
veracode
Side-channel Timing Attack
2017-02-08 02:53:24
nessus
nessus
FreeBSD : OpenSSL -- Local Information Disclosure (7ccd4def-c1be-11e3-9d09-000c2980a9f3)
2014-04-14 00:00:00
IBM HTTP Server 8.0.x < 8.0.0.9 / 8.5.x < 8.5.5.3 (247195)
2021-01-06 00:00:00
SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 9073)
2014-04-17 00:00:00
ibm
ibm
freebsd
freebsd
OpenSSL -- Local Information Disclosure
2014-04-07 00:00:00
f5
f5
K15295 : OpenSSL vulnerability CVE-2014-0076
2014-05-29 00:00:00
SOL15295 - OpenSSL vulnerability CVE-2014-0076
2014-05-29 00:00:00
ubuntucve
ubuntucve
CVE-2014-0076
2014-03-25 00:00:00
seebug
seebug
OpenSSL ECDSA Nonces恢复漏洞
2014-03-25 00:00:00
nvd
nvd
CVE-2014-0076
2014-03-25 13:25:21
openssl
openssl
Vulnerability in OpenSSL CVE-2014-0076
2014-02-14 00:00:00
osv
osv
openssl - security update
2014-04-17 00:00:00
openssl - security update
2014-06-05 00:00:00
gentoo
gentoo
OpenSSL: Information Disclosure
2014-04-08 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package openssl10 version 1.0.1g-alt1
2014-04-08 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.1g-alt1
2014-04-07 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1g-alt1
2014-04-07 00:00:00
securityvulns
securityvulns
OpenSSL security vulnerabilities
2014-05-30 00:00:00
[USN-2165-1] OpenSSL vulnerabilities
2014-04-08 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:06.openssl [REVISED]
2014-04-20 00:00:00
vmware
vmware
VMware product updates address OpenSSL security vulnerabilities
2014-04-14 00:00:00
VMware product updates address OpenSSL security vulnerabilities
2014-04-14 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:06.openssl
2014-04-08 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-04-07 00:00:00
mageia
mageia
Updated openssl package fix two security vulnerabilities
2014-04-08 11:58:47
debian
debian
[SECURITY] [DSA 2908-1] openssl security update
2014-04-17 21:28:20
openssl security update
2014-06-05 19:36:19
openssl security update
2014-06-05 19:36:04
slackware
slackware
[slackware-security] openssl
2014-04-08 15:05:22
suse
suse
Security update for OpenSSL (critical)
2014-06-06 01:05:59
Security update for libopenssl0_9_8 (important)
2016-03-03 14:11:44
huawei
huawei
Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products
2014-06-13 00:00:00
intel
intel
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
2014-06-05 22:40:00
fortinet
fortinet
Multiple Vulnerabilities in OpenSSL
2014-06-06 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
ics
ics
Rockwell Automation Stratix 5900
2017-05-10 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0005 Low
EPSS
Percentile
17.0%
Related for DEBIANCVE:CVE-2014-0076