Lucene search
+L

422 matches found

Cvelist
Cvelist
•added 2020/09/02 12:00 a.m.•54 views

CVE-2020-16150

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

5.5AI score0.00384EPSS
SaveExploits0References6
CVE
CVE
•added 2020/09/02 12:00 a.m.•138 views

CVE-2020-16150

CVE-2020-16150 describes a Lucky 13 timing side-channel in mbedtls_ssl_decrypt_buf (library/ssl_msg.c) of Trusted Firmware Mbed TLS up to version 2.23.0. The side-channel arises from padding-length dependent timing in CBC mode, enabling an attacker to recover secret key information. The vulnerabi...

5.5CVSS5.4AI score0.00384EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/02 12:00 a.m.•3 views

CVE-2020-16150: Observable Discrepancy

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

5.5CVSS5.8AI score0.00384EPSS
SaveExploits0References2
OSV
OSV
•added 2019/01/30 3:29 p.m.•3 views

DEBIAN-CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

5.3CVSS0.01443EPSS
SaveExploits1References1
OSV
OSV
•added 2019/01/30 3:29 p.m.•28 views

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

5.3CVSS6.5AI score0.01443EPSS
SaveExploits1References2
NVD
NVD
•added 2019/01/30 3:29 p.m.•27 views

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

5.3CVSS5AI score0.01443EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2019/01/30 3:29 p.m.•40 views

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

5.3CVSS6.1AI score0.01443EPSS
SaveExploits1References3
Prion
Prion
•added 2019/01/30 3:29 p.m.•28 views

Information disclosure

ARM Trusted Firmware-A allows information disclosure...

5CVSS5AI score0.01443EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2019/01/30 3:29 p.m.•25 views

UBUNTU-CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

5.3CVSS6AI score0.01443EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/30 12:00 a.m.•10 views

CVE-2018-19440: Exposure of Sensitive Information to an Unauthorized Actor

ARM Trusted Firmware-A allows information disclosure...

5.3CVSS5.7AI score0.01443EPSS
SaveExploits1References6
Mend
Mend
•added 2019/01/29 11:00 p.m.•1 views

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

6.9CVSS0.01443EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2019/01/29 11:00 p.m.•5 views

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

5.3CVSS0.01443EPSS
SaveExploits1
Cvelist
Cvelist
•added 2019/01/29 11:00 p.m.•39 views

CVE-2018-19440

ARM Trusted Firmware-A allows information disclosure...

5.1AI score0.01443EPSS
SaveExploits1References2
CVE
CVE
•added 2019/01/29 11:00 p.m.•77 views

CVE-2018-19440

CVE-2018-19440 affects ARM Trusted Firmware-A, with the vulnerability described as information disclosure. Public details consistently identify the affected component as ARM Trusted Firmware-A and report potential confidentiality impact, aligning with CVSS data that lists partial confidentiality ...

5.3CVSS5AI score0.01443EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2018/12/20 12:00 a.m.•21 views

ARM Trusted Firmware Information Disclosure Vulnerability

ARM Trusted Firmware is an implementation of multiple ARM interface standards. An information disclosure vulnerability exists in ARM Trusted Firmware version 1.4 and earlier, which stems from a program's failure to initialize or save/store the PMCREL0 register and can be exploited by an attacker ...

7.5CVSS6.3AI score0.01904EPSS
SaveExploits0References1
OSV
OSV
•added 2018/12/18 4:29 p.m.•14 views

CVE-2017-15031

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCREL0 register can leak secure world timing information...

7.5CVSS5.5AI score0.01904EPSS
SaveExploits0References2
Prion
Prion
•added 2018/12/18 4:29 p.m.•25 views

Information disclosure

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCREL0 register can leak secure world timing information...

5CVSS7.5AI score0.01904EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2018/12/18 4:29 p.m.•6 views

DEBIAN-CVE-2017-15031

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCREL0 register can leak secure world timing information...

7.5CVSS0.01904EPSS
SaveExploits0References1
NVD
NVD
•added 2018/12/18 4:29 p.m.•35 views

CVE-2017-15031

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCREL0 register can leak secure world timing information...

7.5CVSS7.5AI score0.01904EPSS
SaveExploits0References2
Mend
Mend
•added 2018/12/18 4:00 p.m.•4 views

CVE-2017-15031

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCREL0 register can leak secure world timing information...

8.7CVSS0.01904EPSS
SaveExploits0References2
Rows per page
Query Builder