6 matches found
CVE-2026-3580
In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...
UBUNTU-CVE-2026-3580
In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...
CVE-2026-3580
In wolfSSL 5.8.4, GCC optimizes constant-time masking logic in sp_256_get_entry_256_9 into conditional branches (bnez) when targeting RISC-V RV32I with -O3, breaking the expected side-channel resistance of ECC scalar multiplication. This may enable a local attacker to recover secret keys via timi...
gcc: POWER9 "DARN" RNG intrinsic produces repeated output
The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...
openSUSE: Security Advisory for dpdk (openSUSE-SU-2018:4003-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
NetBSD Security Advisory 2000-002
NetBSD Security Advisory 2000-002 ================================= Topic: IP options processing Denial of Service Version: NetBSD 1.4.2 and prior; NetBSD-current until 20000507. Severity: Network-connected systems can be crashed remotely. Abstract ======== Receipt of IP packets with certain...