Lucene search
K

6 matches found

NVD
NVD
added 2026/03/19 8:16 p.m.7 views

CVE-2026-3580

In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...

4.7CVSS0.00128EPSS
Exploits0References1
OSV
OSV
added 2026/03/19 8:16 p.m.3 views

UBUNTU-CVE-2026-3580

In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...

4.7CVSS5.8AI score0.00128EPSS
Exploits0References3
CVE
CVE
added 2026/03/19 7:46 p.m.17 views

CVE-2026-3580

In wolfSSL 5.8.4, GCC optimizes constant-time masking logic in sp_256_get_entry_256_9 into conditional branches (bnez) when targeting RISC-V RV32I with -O3, breaking the expected side-channel resistance of ECC scalar multiplication. This may enable a local attacker to recover secret keys via timi...

4.7CVSS5.8AI score0.00128EPSS
Exploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2020/04/28 3:57 p.m.0 views

gcc: POWER9 "DARN" RNG intrinsic produces repeated output

The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...

7.5CVSS7.4AI score0.03207EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2018/12/10 12:0 a.m.19 views

openSUSE: Security Advisory for dpdk (openSUSE-SU-2018:4003-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.7AI score0.00878EPSS
Exploits0References2
securityvulns
securityvulns
added 2000/05/10 12:0 a.m.39 views

NetBSD Security Advisory 2000-002

NetBSD Security Advisory 2000-002 ================================= Topic: IP options processing Denial of Service Version: NetBSD 1.4.2 and prior; NetBSD-current until 20000507. Severity: Network-connected systems can be crashed remotely. Abstract ======== Receipt of IP packets with certain...

7.2AI score
Exploits0
Rows per page
Query Builder