Lucene search
Veracode Vulnerability DatabaseVERACODE:21976HistoryNov 19, 2019 - 1:20 a.m.
Timing Attack
2019-11-1901:20:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.002 Low
EPSS
Percentile
62.2%
simplito/elliptic-php is vulnerable to timing attack. The bit-length of the scalar is leaked during scalar multiplication on an elloptic curve, which can result in the recovery of the long-term private key generated by the library, due to inconsistent time during generation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplito/elliptic-php | le | 1.0.5 |
Related
prion
prion
Design/Logic Flaw
2019-11-18 22:15:00
osv
osv
CVE-2019-10764
2019-11-18 22:15:11
Timing attacks might allow practical recovery of the long-term private key
2019-11-20 01:34:50
cvelist
cvelist
CVE-2019-10764
2019-11-18 21:55:34
nvd
nvd
CVE-2019-10764
2019-11-18 22:15:11
cve
cve
CVE-2019-10764
2019-11-18 22:15:11
github
github
Timing attacks might allow practical recovery of the long-term private key
2019-11-20 01:34:50