Lucene search
K

7 matches found

OSV
OSV
added 2025/11/21 3:59 p.m.3 views

JLSEC-2025-202 A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware M...

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

5.5CVSS7.3AI score0.00077EPSS
Exploits0References6
OSV
OSV
added 2020/09/02 4:15 p.m.1 views

ALPINE-CVE-2020-16150

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

5.5CVSS6.8AI score0.00077EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2020/09/02 12:0 a.m.3 views

PT-2020-14778 · Arm +2 · Mbed Tls +2

Name of the Vulnerable Software and Affected Versions: Trusted Firmware Mbed TLS versions prior to 2.23.0 Description: A timing side channel in the mbedtls ssl decrypt buf function in the library/ssl msg.c file allows an attacker to recover secret key information. This issue affects CBC mode due ...

9.8CVSS5.8AI score0.02049EPSS
Exploits6References84
NVD
NVD
added 2017/04/07 5:59 p.m.15 views

CVE-2017-3887

A vulnerability in the detection engine that handles Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco...

5.9CVSS5.8AI score0.00558EPSS
Exploits0References2
CVE
CVE
added 2017/04/07 5:0 p.m.56 views

CVE-2017-3887

CVE-2017-3887 concerns Cisco Firepower System Software’s SSL packet handling in the detection engine when configured with an SSL Decrypt-Resign policy. An unauthenticated, remote attacker could trigger a DoS by causing the Snort process to restart, degrading or bypassing traffic inspection. Affec...

5.9CVSS5.7AI score0.00558EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/09/11 12:0 a.m.9 views

HTTP Protocol Detection via SSL Decrypt

Binary data 8860.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/09/11 12:0 a.m.9 views

Web Server Detection via SSL Decrypt

Binary data 8859.prm...

7.3AI score
Exploits0
Rows per page
Query Builder