CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

Code injection

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

DEBIAN-CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

SUSE-SU-2018:2683-1 Security update for compat-openssl098

This update for compat-openssl098 fixes the following security issues: - CVE-2018-0732: During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of...

CVE-2016-7056

CVE-2016-7056 describes a timing attack in OpenSSL 1.0.1u and earlier that could allow a local attacker to recover an ECDSA P-256 private key. The root cause is a timing side-channel during ECDSA signing; no remote/external access requirement is stated in the sources, only local access. Publicly ...

CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys...

openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2018:2658-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for MozillaThunderbird (important)

This update for MozillaThunderbird to version 60.0 fixes the following issues: These security issues were fixed: - CVE-2018-12359: Prevent buffer overflow using computed size of canvas element bsc1098998. - CVE-2018-12360: Prevent use-after-free when using focus bsc1098998. - CVE-2018-12361:...

Timing Attack

lusca is vulnerable to timing attacks. The library does not compare the csrf token in constant time, allowing a malicious user to use the timing of the request to progressively identify a valid token...

Updated openssl packages fix security vulnerabilities

Updated openssl packages fix security vulnerabilities: During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime...

MGASA-2018-0365 Updated openssl packages fix security vulnerabilities

Updated openssl packages fix security vulnerabilities: During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime...

OpenSSL 1.1.0 < 1.1.0i Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.0i. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.0i advisory. - Simultaneous Multi-threading SMT in processors can enable local users to exploit software vulnerable to timing attacks via a...

SUSE-SU-2018:2492-1 Security update for openssl

This update for openssl fixes the following security issue: - CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have...

Timing Attack

BCrypt.Net-Core is vulnerable to timing attacks. The library does not compare the password hash in constant time, allowing a malicious user to use the timing of the request to progressively identify a valid hash...

SUSE SLES11 Security Update : openssl (SUSE-SU-2018:2486-1)

This update for openssl fixes the following security issue : - CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have...

SUSE-SU-2018:2486-1 Security update for openssl

This update for openssl fixes the following security issue: - CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have...

Timing Attack

libgnutls.c is vulnerable to timing attacks. The uses the wrong constant during HMAC-SHA-384 hashing, allowing a malicious user to conduct gain access to sensitive information by analyzing the timing data by sending crafted packets. This is similar to the "Lucky Thirteen" attack...

Timing Attack

libgnutls.so is vulnerable to timing attacks. A malicious user could statistically analyze the timing data by sending packets to the application, conducting an attack similar to the "Lucky Thirteen" attack...