Lucene search

GHSA-4GRX-2X9W-596C Marvin Attack: potential key recovery through timing sidechannels

🗓️ 28 Nov 2023 23:25:28Reported by GoogleType

osv🔗 osv.dev👁 64 Views

Potential key recovery through timing sidechannel attack on RSA implementations. Rust `rsa` crate vulnerable to exploit

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 16
UbuntuCve	CVE-2023-49092	28 Nov 202300:00	–	ubuntucve
NVD	CVE-2023-49092	28 Nov 202321:15	–	nvd
Debian CVE	CVE-2023-49092	28 Nov 202321:15	–	debiancve
OSV	GHSA-C38W-74PG-36HR Marvin Attack: potential key recovery through timing sidechannels	28 Nov 202323:28	–	osv
OSV	OPENSUSE-SU-2024:13542-1 cargo-audit-advisory-db-20231219-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	UBUNTU-CVE-2023-49092	28 Nov 202321:15	–	osv
OSV	CGA-G8R9-VV23-F4JF	19 Dec 202401:22	–	osv
OSV	CVE-2023-49092	28 Nov 202321:15	–	osv
OSV	RUSTSEC-2023-0071 Marvin Attack: potential key recovery through timing sidechannels	22 Nov 202312:00	–	osv
Vulnrichment	CVE-2023-49092 RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels	28 Nov 202320:57	–	vulnrichment

Source	Link
github	www.github.com/RustCrypto/RSA/security/advisories/GHSA-c38w-74pg-36hr
github	www.github.com/RustCrypto/RSA/issues/19
github	www.github.com/RustCrypto/RSA
rustsec	www.rustsec.org/advisories/RUSTSEC-2023-0071.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Nov 2023 23:28Current

5.4Medium risk

Vulners AI Score5.4

CVSS35.9

EPSS0.00562

SSVC