172 matches found
CVE-2026-63410
secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...
EUVD-2026-114552
secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...
CVE-2026-63410 secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication
secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...
CVE-2026-63410 secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication
secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...
CVE-2026-63410: sgbett secp256k1-native: secp256k1-native is a native C secp256k1 implementation for Ruby
secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...
PT-2026-134251
Name of the Vulnerable Software and Affected Versions secp256k1-native versions prior to 0.18.0 Description In native builds, constant-time scalar multiplication through the Pointmul or scalar multiply ct functions can leak timing information about a secret scalar. This occurs when the software i...
Amazon Linux 2023 : edk2-aarch64, edk2-ovmf, edk2-shell-aa64 (ALAS2023-2026-3227)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3227 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growth when OpenSSL cachesX.509 extensions. Impact summary: Receiving a craft...
Amazon Linux 2 : edk2 (ALAS-2026-4007)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4007 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growth when OpenSSL cachesX.509 extensions. Impact summary: Receiving a crafted...
Important: edk2
Issue Overview: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possib...
CLSA-2026-1792414477 openssl: Fix of 4 CVEs
CVE-2026-54872: pad the ladder scalar to a fixed, value-independent width before the cardinality additions so EC scalar multiplication on curves using the generic Montgomery ladder no longer leaks the scalar's magnitude by timing - CVE-2026-75805: guard the issuer and serial-number comparisons in...
OESA-2026-4418 openssl security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL...
OESA-2026-4417 openssl security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL...
OESA-2026-4416 openssl security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL...
CLEANSTART-2026-KH74871 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secre...
CVE-2026-54872 affects multiple packages. Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. See references for individual...
Important: openssl
Issue Overview: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possib...
Amazon Linux 2 : openssl (ALAS-2026-3992)
The version of openssl installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3992 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growt...
Important: openssl-snapsafe
Issue Overview: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possib...
Timing leaks of the nonce in ECDSA, EdDSA and DSA signatures
Helder Eijs reports Fix timing leaks of the nonce in ECDSA, EdDSA and DSA signatures The signing time depended on the secret nonce, enough to recover the private key with a lattice attack. - EC: scalars are encoded and processed on the full length of the order, and ecmixadd is constant time for t...
Linux Distros Unpatched Vulnerability : CVE-2017-15031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCREL0 register can leak secure world timing...
SUSE CVE-2026-54872
Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn...