Design/Logic Flaw

MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or a remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because crypto/pubkey/eccmath.c scalar...

Design/Logic Flaw

Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private...

UBUNTU-CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-13629

CVE-2019-13629 affects MatrixSSL 4.2.1 and earlier. The vulnerability is a timing side channel in ECDSA signature generation: the implementation leaks the bit length of the scalar via scalar multiplication in crypto/pubkey/ecc_math.c. An attacker who can observe durations over hundreds to thousan...

CVE-2019-13629

MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or a remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because crypto/pubkey/eccmath.c scalar...

CVE-2019-13628

CVE-2019-13628 affects wolfSSL/wolfCrypt 4.0.0 and earlier when built without --enable-fpecc, --enable-sp, or --enable-sp-math. The issue is a timing side-channel in ECDSA signature generation caused by ecc.c scalar multiplication leaking bit-length information. This may allow a local attacker wh...

CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-15809

CVE-2019-15809 describes a timing side-channel in ECDSA signature generation on Athena SCS smart cards (AT90SC) using Atmel Toolbox 00.03.11.05. The toolbox includes two ECDSA implementations, fast and secure; affected cards selected the fast variant, leaking the bit-length of the nonce via timin...

CVE-2019-15809

Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private...

Debian: Security Advisory (DSA-4540-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4539-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4540-1 : openssl1.0 - security update

Two security issues were discovered in OpenSSL: A timing attack against ECDSA and a padding oracle in PKCS7dataDecode and CMSdecryptset1pkey. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4540. The text...

Debian DSA-4539-1 : openssl - security update

Three security issues were discovered in OpenSSL: A timing attack against ECDSA, a padding oracle in PKCS7dataDecode and CMSdecryptset1pkey and it was discovered that a feature of the random number generator RNG intended to protect against shared RNG state between parent and child processes in th...

SUSE-SU-2019:2510-1 Security update for libgcrypt

This update for libgcrypt fixes the following issues: Security issues fixed: - CVE-2019-13627: Mitigated ECDSA timing attack. bsc1148987...

CVE-2019-3729

RSA BSAFE Micro Edition Suite versions prior to 4.4 in 4.0.x, 4.1.x, 4.2.x and 4.3.x are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature. A malicious user with adjacent network access could potentially exploit this vulnerability to cause a crash in the librar...

CVE-2019-3729

RSA BSAFE Micro Edition Suite versions prior to 4.4 in 4.0.x, 4.1.x, 4.2.x and 4.3.x are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature. A malicious user with adjacent network access could potentially exploit this vulnerability to cause a crash in the librar...

Heap overflow

RSA BSAFE Micro Edition Suite versions prior to 4.4 in 4.0.x, 4.1.x, 4.2.x and 4.3.x are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature. A malicious user with adjacent network access could potentially exploit this vulnerability to cause a crash in the librar...

CVE-2019-3729

RSA BSAFE Micro Edition Suite versions prior to 4.4 in 4.0.x, 4.1.x, 4.2.x and 4.3.x are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature. A malicious user with adjacent network access could potentially exploit this vulnerability to cause a crash in the librar...

CVE-2019-3729

The vulnerability CVE-2019-3729 affects RSA BSAFE Micro Edition Suite versions prior to 4.4 (4.0.x, 4.1.x, 4.2.x, 4.3.x). The issue is a heap-based buffer overflow that occurs when parsing an ECDSA signature, which an adjacent-network attacker could potentially exploit to cause a crash in the aff...