Lucene search
+L

7 matches found

osv_jlsec
osv_jlsec
•added 2026/07/14 9:41 p.m.•33 views

JLSEC-2026-693 ML-KEM-1024 x64 AVX2 implicit rejection failure in the Fujisaki-Okamoto transform breaks IND-CCA2...

wolfSSL's AVX2-optimized ML-KEM implementation mlkemcmpavx2 compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 decapsulation. Ciphertexts that differ from the expected re-encryption solely in bytes 1536-1567 bypass implicit rejection and...

8.3CVSS5.8AI score0.00262EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/06/30 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-10097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL's AVX2-optimized ML-KEM implementation mlkemcmpavx2 compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in...

8.3CVSS5.8AI score0.00262EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/06/25 8:17 p.m.•27 views

UBUNTU-CVE-2026-10097

wolfSSL's AVX2-optimized ML-KEM implementation mlkemcmpavx2 compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 decapsulation. Ciphertexts that differ from the expected re-encryption solely in bytes 1536-1567 bypass implicit rejection and...

8.3CVSS5.8AI score0.00262EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/06/25 7:59 p.m.•44 views

CVE-2026-10097

wolfSSL's AVX2-optimized ML-KEM implementation mlkemcmpavx2 compares only 1536 of the 1568 ciphertext bytes during the Fujisaki-Okamoto re-encryption check in ML-KEM-1024 decapsulation. Ciphertexts that differ from the expected re-encryption solely in bytes 1536-1567 bypass implicit rejection and...

8.3CVSS5.8AI score0.00262EPSS
SaveExploits0
Mageia
Mageia
•added 2013/12/20 5:29 p.m.•55 views

Updated gnupg package fixes CVE-2013-4576

Updated gnupg package fixes security vulnerability: Genkin, Shamir and Tromer discovered that RSA key material could be extracted by using the sound generated by the computer during the decryption of some chosen ciphertexts CVE-2013-4576...

2.1CVSS6.9AI score0.00451EPSS
SaveExploits0References3
ThreatPost
ThreatPost
•added 2013/12/19 8:02 a.m.•29 views

Researchers Find Way to Extract 4096-Bit RSA Key via Sound

A trio of scientists have verified that results they first presented nearly 10 years ago are in fact valid, proving that they can extract a 4096-bit RSA key from a laptop using an acoustic side-channel attack that enables them to record the noise coming from the laptop during decryption, using a...

0.5AI score
SaveExploits0References4
osv_dsa
osv_dsa
•added 2013/12/18 12:00 a.m.•23 views

DSA-2821-1 gnupg - side channel attack

Bulletin has no description...

2.1CVSS6.7AI score0.00451EPSS
SaveExploits0
Rows per page
Query Builder