The vulnerability of the BN_mod_exp function (crypto/bn/asm/x86_64-mont5.pl) in the OpenSSL library, which allows a perpetrator to gain unauthorized access to confidential data

The vulnerability of the BNmodexp function crypto/bn/asm/x8664-mont5.pl in the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to confidential data...

EulerOS 2.0 SP2 : libgcrypt (EulerOS-SA-2020-1672)

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proxima...

DEBIAN-CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

Design/Logic Flaw

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

openssl security update

1.0.2k-16.0.1.el76.1 - Bump release for rebuild. 1.0.2k-16.1 - use SHA-256 in FIPS RSA pairwise key check - fix CVE-2018-5407 - EC signature local timing side-channel key extraction 1.0.2k-16 - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA - fix incorrect error message on...

Side Channel Attack On Modular Exponentiation

OpenSSL is vulnerable to side channel attacks. The vulnerability exploits cache-bank conflicts on the Intel Sandy-Bridge microarchitecture, exposing RSA keys. However, an attacker can only exploit this only if he has control of code in a thread running on the same hyper-threaded core as the victi...

CVE-2016-6885

The pstmexptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid free and crash via a base zero value for the modular exponentiation...

CVE-2016-6885

The pstmexptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid free and crash via a base zero value for the modular exponentiation...

CVE-2016-6885

The pstmexptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid free and crash via a base zero value for the modular exponentiation...

CVE-2016-6887

The pstmexptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT attack...

Code injection

The pstmexptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT attack...

CVE-2016-6887

The pstmexptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT attack...

CVE-2016-8671

The pstmexptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6887...

CVE-2016-8671

The CVE-2016-8671 issue affects MatrixSSL 3.8.6 and earlier, where the modular exponentiation in pstm_exptmod is not performed correctly. This vulnerability could allow remote attackers to predict the secret key via certain vectors, stemming from an incomplete fix for CVE-2016-6887. Public source...

CVE-2016-6887

Summary: CVE-2016-6887 affects MatrixSSL 3.8.6 and earlier, where the pstm_exptmod function mishandles modular exponentiation, enabling potential key prediction via a CRT attack. The related OpenVAS entry indicates a vulnerability class for MatrixSSL

OpenSSL: Side channel attack on modular exponentiation

A side-channel attack was found that makes use of cache-bank conflicts on the Intel Sandy-Bridge microarchitecture. An attacker who has the ability to control code in a thread running on the same hyper-threaded core as the victim's thread that is performing decryption, could use this flaw to...

OracleVM 3.3 / 3.4 : openssl (OVMSA-2016-0049) (SLOTH)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2016-2105 - possible overflow in base64 encoding - fix CVE-2016-2106 - possible overflow in EVPEncryptUpdate - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC - fix CVE-2016-2108...

openSUSE Security Update : compat-openssl098 (openSUSE-2016-575)

This update for compat-openssl098 fixes the following issues : - CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 - CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 - CVE-2016-2106: EVPEncryptUpdate overflow bsc977615 - CVE-2016-2109: ASN.1 BIO excessive memory allocation bsc97694...