Vulnerability in OpenSSL - ECDSA remote timing attack

🗓️ 10 Sep 2019 00:00:00Reported by OpenSSLType

openssl🔗 www.openssl-library.org👁 152 Views

Vulnerability in OpenSSL ECDSA remote timing attack due to explicit parameters without a co-factor present, leading to full key recovery during signature operation

Reporter	Title	Published	Views	Family All 312
ibm	Security Bulletin: A security vulnerability has been identified in openssl shipped with PowerAI Vision	8 Jan 202019:00	–	ibm
ibm	Security Bulletin: A vulnerability in OpenSSL affects IBM Storage Protect Backup-Archive Client on Linux x86_64 and Microsoft Windows (CVE-2019-1547)	31 Oct 202314:40	–	ibm
ibm	Security Bulletin: Information Disclosure in Cognos Business Intelligence (Cognos BI) shipped with Tivoli Common Reporting (CVE-2019-1547, CVE-2019-1549, CVE-2019-1563)	19 Mar 202005:19	–	ibm
ibm	Security Bulletin: OpenSSL vulnerability affects IBM Rational Team Concert	12 Feb 202016:09	–	ibm
ibm	Security Bulletin: OpenSSL vulnerabilities affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center)	22 Feb 202220:10	–	ibm
ibm	Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2019-1547, CVE-2019-1563)	23 Oct 201903:29	–	ibm
ibm	Security Bulletin: A security vulnerability has been identified in Openssl shipped with PowerAI.	10 Jan 202019:12	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in OpenSSL Affect IBM Sterling Connect:Direct for HP NonStop	24 Jul 202022:19	–	ibm
ibm	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - OpenSSL (CVE-2019-1563, CVE-2019-1549, CVE-2019-1547)	26 Sep 202018:07	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM i	19 Dec 201923:43	–	ibm

Vulners

Node

openssl opensslRange1.1.1–1.1.1d

openssl opensslRange1.1.0–1.1.0l

openssl opensslRange1.0.2–1.0.2t

10 Sep 2019 00:00Current

5.5Medium risk

Vulners AI Score5.5

EPSS0.01188