EUVD-2020-4077

Malware in sbrugna...

CVE-2020-12400

When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects Firefox 80 and Firefox for Android 80...

CVE-2020-11735

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."...

DEBIAN-CVE-2020-11735

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."...

CVE-2020-11735

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."...

Design/Logic Flaw

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."...

CVE-2020-11735

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."...

CVE-2020-11735

The CVE-2020-11735 issue affects wolfSSL’s ECC implementation (ecc.c) in versions prior to 4.4.0, where private-key operations do not use a constant-time modular inverse when mapping to affine coordinates, causing a projective coordinates leak. This is treated as a timing-related vulnerability af...

CVE-2020-11735: Observable Discrepancy

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."...

PT-2020-12815

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 4.4.0 Description The issue concerns the private-key operations in ecc.c, which do not use a constant-time modular inverse when mapping to affine coordinates. This is also known as a "projective coordinates leak."...