OpenSSL Timing Side-Channel Vulnerability (20250120) - Windows

OpenSSL is prone to a timing side-channel vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

PT-2025-2037

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing...

OpenSSL Timing Side-Channel Vulnerability (20250120) - Linux

OpenSSL is prone to a timing side-channel vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

CLSA-2025-1736859209 libgcrypt: Fix of CVE-2024-2236

CVE-2024-2236: fix timing-based side-channel vulnerability in RSA implementation...

PT-2025-5628 · Intel · Intel Sgx

Name of the Vulnerable Software and Affected Versions: Intel SGX affected versions not specified Description: The issue is a side-channel timing attack against Intel SGX enclaves, which can lead to the complete compromise of Trusted Execution Environment TEE attestation. A proof of concept PoC ha...

CVE-2024-56738

A flaw was found in GRUB2. Affected versions of GRUB2 do not use a constant-time algorithm for grubcryptomemcmp, which can allow side-channel attacks...

SUSE CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

PT-2025-40436

Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description A side-channel information leakage issue exists in Tab. This issue affects Chromium and, by extension, Microsoft Edge Chromium-based. Recommendations At the moment, there is no information...

PT-2025-39218

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.207 Chromium versions prior to 140.0.7339.207 Chromium versions prior to 140.0.7339.207-1deb12u1 Debian bookworm Chromium versions prior to 140.0.7339.207-1deb13u1 Debian trixie Chromium version...

PT-2025-39217

Name of the Vulnerable Software and Affected Versions Chrome versions prior to 140.0.7339.207/208 Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue is a side-channel information leak within Chrome’s V8 engine. Recommendations Update to Chrome...

PT-2025-39219

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.207 Description An integer overflow in the V8 JavaScript engine within Google Chrome could lead to heap corruption. This issue potentially allows a remote attacker to exploit the system through a...

PT-2025-40433

Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description A side-channel information leakage issue exists in Storage. This can allow attackers to affect the system. Recommendations At the moment, there is no information about a newer version that...

DEBIAN-CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

AZL-54709 CVE-2024-56738 affecting package grub2 2.06-27

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

PT-2024-37048

Name of the Vulnerable Software and Affected Versions GNU GRUB aka GRUB2 versions 2.12 and earlier Description The issue is related to the use of a non-constant time algorithm for grub crypto memcmp, which allows side-channel attacks. This means that an attacker could potentially exploit the...

CVE-2024-56738

CVE-2024-56738 details (Mode C): GNU GRUB (GRUB2) up to version 2.12 is affected because grub_crypto_memcmp is not implemented in constant time, enabling potential side-channel attacks. Connected Nessus entries for EulerOS/Virt show the same CVE-2024-56738 claim and reference. The description doe...