Lucene search

K
osvGoogleOSV:GO-2023-1709
HistoryApr 12, 2023 - 5:45 p.m.

Cache-timing attacks in Shamir's secret sharing in github.com/hashicorp/vault

2023-04-1217:45:35
Google
osv.dev
184
shamir's secret sharing
hashicorp vault
cache-timing attacks
software
side channel

5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N

4.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

HashiCorp Vault’s implementation of Shamir’s secret sharing uses precomputed table lookups, and is vulnerable to cache-timing attacks.

An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares.

5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N

4.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%