Lucene search

K
osvGoogleOSV:CVE-2018-12434
HistoryJun 15, 2018 - 2:29 a.m.

CVE-2018-12434

2018-06-1502:29:00
Google
osv.dev
2

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

20.7%

LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

20.7%