Lucene search
+L

60 matches found

RedHat Linux
RedHat Linux
•added 2023/03/14 1:57 p.m.•194 views

openssl: timing attack in RSA Decryption implementation

A timing-based side channel exists in the OpenSSL RSA Decryption implementation, which could be sufficient to recover a ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption, an attacker would have to be able to send a very large number of trial messages...

5.9CVSS6.7AI score0.16195EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/02/28 8:22 a.m.•19 views

openssl: timing attack in RSA Decryption implementation

A timing-based side channel exists in the OpenSSL RSA Decryption implementation, which could be sufficient to recover a ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption, an attacker would have to be able to send a very large number of trial messages...

5.9CVSS6.7AI score0.16195EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 3:30 a.m.•10 views

SUSE CVE-2022-4304

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS6.5AI score0.16195EPSS
SaveExploits0References172
Positive Technologies
Positive Technologies
•added 2023/02/09 12:00 a.m.•6 views

PT-2023-33037 · Openssl · Openssl

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 1.1.0 Description: A timing-based side channel issue exists in the OpenSSL RSA decryption implementation, potentially allowing the recovery of plaintext from across the network. This issue affects all RSA padding...

7AI score
SaveExploits0References6
OSV
OSV
•added 2023/02/08 10:31 p.m.•81 views

GHSA-P52G-CM5J-MJV4 openssl-src subject to Timing Oracle in RSA Decryption

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS6.7AI score0.16195EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2023/02/08 10:31 p.m.•61 views

openssl-src subject to Timing Oracle in RSA Decryption

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS6.7AI score0.16195EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2023/02/08 8:15 p.m.•12 views

AZL-13302 CVE-2022-4304 affecting package cloud-hypervisor for versions less than 30.0-2

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS6.7AI score0.16195EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/08 8:15 p.m.•17 views

AZL-13310 CVE-2022-4304 affecting package openssl for versions less than 1.1.1k-21

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS6.9AI score0.16195EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/08 8:15 p.m.•13 views

AZL-34668 CVE-2022-4304 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS6.9AI score0.16195EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/08 8:15 p.m.•18 views

AZL-31140 CVE-2022-4304 affecting package edk2 for versions less than 20230301gitf80f052277c8-42

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS6.9AI score0.16195EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/08 8:15 p.m.•13 views

DEBIAN-CVE-2022-4304

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS7.2AI score0.16195EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/08 8:15 p.m.•49 views

Design/Logic Flaw

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

2.6CVSS6.6AI score0.16195EPSS
SaveExploits0References2Affected Software4
AlpineLinux
AlpineLinux
•added 2023/02/08 7:04 p.m.•43 views

CVE-2022-4304

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS7.1AI score0.16195EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/02/08 7:04 p.m.•64 views

CVE-2022-4304 Timing Oracle in RSA Decryption

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

6.7AI score0.16195EPSS
SaveExploits0References2
OSV
OSV
•added 2023/02/08 7:04 p.m.•35 views

CVE-2022-4304 Timing Oracle in RSA Decryption

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS7AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2023/02/08 7:04 p.m.•81 views

CVE-2022-4304

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS6.8AI score0.16195EPSS
SaveExploits0
RustSec
RustSec
•added 2023/02/07 12:00 p.m.•88 views

Timing Oracle in RSA Decryption

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS6.5AI score0.16195EPSS
SaveExploits0Affected Software1
UbuntuCve
UbuntuCve
•added 2023/02/07 12:00 a.m.•45 views

CVE-2022-4304

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS7AI score0.16195EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2023/02/07 12:00 a.m.•506 views

OpenSSL 1.0.2 < 1.0.2zg Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2zg. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2zg advisory. - There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were...

7.5CVSS7.8AI score0.59501EPSS
SaveExploits0References8
OpenSSL
OpenSSL
•added 2023/02/07 12:00 a.m.•134 views

Timing Oracle in RSA Decryption

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...

5.9CVSS7AI score0.16195EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder