Design/Logic Flaw

🗓️ 14 Nov 2022 23:15:00Reported by PRIOn knowledge baseType

Diffie-Hellman Key Agreement Protocol uses long exponents, which could lead to expensive calculations. Short exponents with adequate subgroup constraints can reduce costs and may pose server-side vulnerability in protocols like TLS, SSH, or IKE

Reporter	Title	Published	Views	Family All 44
ATTACKERKB	CVE-2022-40735	14 Nov 202223:15	–	attackerkb
Information Security Automation	VMconf 22: Blindspots in the Knowledge Bases of Vulnerability Scanners	18 Feb 202217:00	–	avleonov
Cloud Foundry	USN-6854-1: OpenSSL vulnerability \| Cloud Foundry	25 Jul 202400:00	–	cloudfoundry
Circl	CVE-2002-20001	11 Nov 202122:37	–	circl
Circl	CVE-2022-40735	19 Mar 202600:00	–	circl
CNNVD	Diffie-Hellman Key Agreement Protocol 资源管理错误漏洞	11 Nov 202100:00	–	cnnvd
CNNVD	Diffie-Hellman Key Agreement Protocol 资源管理错误漏洞	14 Nov 202200:00	–	cnnvd
CVE	CVE-2002-20001	11 Nov 202100:00	–	cve
CVE	CVE-2022-40735	14 Nov 202200:00	–	cve
Cvelist	CVE-2002-20001	11 Nov 202100:00	–	cvelist

Source	Link
github	www.github.com/mozilla/ssl-config-generator/issues/162
link	www.link.springer.com/content/pdf/10.1007/3-540-68339-9_29.pdf
nvlpubs	www.nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf
researchgate	www.researchgate.net/profile/Anton-Stiglic-2/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol/links/546c144f0cf20dedafd53e7e/Security-Issues-in-the-Diffie-Hellman-Key-Agreement-Protocol.pdf
gist	www.gist.github.com/c0r0n3r/9455ddcab985c50fd1912eabf26e058b
rfc-editor	www.rfc-editor.org/rfc/rfc4419
rfc-editor	www.rfc-editor.org/rfc/rfc7919
rfc-editor	www.rfc-editor.org/rfc/rfc3526
raw	www.raw.githubusercontent.com/CVEProject/cvelist/9d7fbbcabd3f44cfedc9e8807757d31ece85a2c6/2022/40xxx/CVE-2022-40735.json
rfc-editor	www.rfc-editor.org/rfc/rfc5114