Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:39202
HistoryFeb 10, 2023 - 1:05 p.m.

Timing Attack

2023-02-1013:05:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

53.6%

JSON

openssl is vulnerable to Timing Attack. The vulnerability exists in rsa/rsa_ossl.c because an attacker can recover ciphertext with a Bleichenbacher style attack by sending a large number of trial messages.

Related

nessus 61
ubuntucve 1
cbl_mariner 6
openvas 39
ibm 31
osv 8
redhatcve 1
cve 1
cgr 1
prion 1
github 1
debiancve 1
cvelist 1
alpinelinux 1
hackerone 1
openssl 1
rustsec 1
f5 1
ics 5
githubexploit 1
wolfi 1
redhat 7
amazon 3
altlinux 2
almalinux 3
oraclelinux 9
freebsd_advisory 1
freebsd 1
redos 1
rocky 1
fedora 2
slackware 1
debian 2
photon 1
nessus
nessus
SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2023:2622-1)
2023-06-25 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssl-1_1 (SUSE-SU-2023:2648-1)
2023-06-28 00:00:00
SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2023:0581-1)
2023-03-01 00:00:00
ubuntucve
ubuntucve
CVE-2022-4304
2023-02-07 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-4304 affecting package cloud-hypervisor 22.0-2
2024-05-17 09:07:12
CVE-2022-4304 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
CVE-2022-4304 affecting package openssl for versions less than 1.1.1k-21
2023-02-14 20:36:09
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2622-1)
2023-06-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2624-1)
2023-06-26 00:00:00
openSUSE: Security Advisory for openssl (SUSE-SU-2023:2633-1)
2024-03-04 00:00:00
ibm
ibm
Security Bulletin: IBM Elastic Storage System is affected by a vulnerability in OpenSSL (CVE-2022-4304)
2023-08-24 06:11:51
Security Bulletin: IBM Events Operator is affected by an openssl vulnerability
2023-09-25 14:36:07
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to information exposure in OpenSSL (CVE-2022-4304)
2023-07-27 17:21:23
osv
osv
Timing Oracle in RSA Decryption
2023-02-07 12:00:00
openssl-src subject to Timing Oracle in RSA Decryption
2023-02-08 22:31:42
CVE-2022-4304
2023-02-08 20:15:23
redhatcve
redhatcve
CVE-2022-4304
2023-02-07 17:27:55
cve
cve
CVE-2022-4304
2023-02-08 20:15:00
cgr
cgr
CVE-2022-4304 vulnerabilities
2024-05-17 15:41:37
prion
prion
Design/Logic Flaw
2023-02-08 20:15:00
github
github
openssl-src subject to Timing Oracle in RSA Decryption
2023-02-08 22:31:42
debiancve
debiancve
CVE-2022-4304
2023-02-08 20:15:00
cvelist
cvelist
CVE-2022-4304 Timing Oracle in RSA Decryption
2023-02-08 19:04:28
alpinelinux
alpinelinux
CVE-2022-4304
2023-02-08 20:15:00
hackerone
hackerone
Internet Bug Bounty: OpenSSL vulnerable to the Marvin Attack (CVE-2022-4304)
2023-12-02 23:45:28
openssl
openssl
Vulnerability in OpenSSL CVE-2022-4304
2023-02-07 00:00:00
rustsec
rustsec
Timing Oracle in RSA Decryption
2023-02-07 12:00:00
f5
f5
K000132943 : OpenSSL vulnerability CVE-2022-4304
2023-03-13 00:00:00
ics
ics
Siemens OpenSSL RSA Decryption in SIMATIC
2023-08-10 12:00:00
Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch
2023-10-05 12:00:00
Mitsubishi Electric Factory Automation Products
2024-01-04 12:00:00
githubexploit
githubexploit
Exploit for Observable Discrepancy in Openssl
2023-04-24 07:15:33
wolfi
wolfi
CVE-2022-4304 vulnerabilities
2024-05-17 16:29:45
redhat
redhat
(RHSA-2023:3408) Moderate: openssl security update
2023-05-31 18:25:53
(RHSA-2023:4128) Important: edk2 security update
2023-07-18 07:19:33
(RHSA-2023:3420) Important: Red Hat JBoss Web Server 5.7.3 release and security update
2023-06-05 13:52:35
amazon
amazon
Important: openssl
2023-02-03 23:39:00
Important: openssl
2023-02-03 19:19:00
Important: openssl11
2023-02-03 19:19:00
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1
2023-02-10 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1
2023-02-20 00:00:00
almalinux
almalinux
Important: edk2 security update
2023-05-16 00:00:00
Important: openssl security update
2023-03-22 00:00:00
Important: edk2 security, bug fix, and enhancement update
2023-05-09 00:00:00
oraclelinux
oraclelinux
edk2 security update
2023-12-07 00:00:00
edk2 security update
2023-12-06 00:00:00
edk2 security update
2023-12-06 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:03.openssl
2023-02-16 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in OpenSSL
2023-02-16 00:00:00
redos
redos
ROS-20230418-05
2023-04-18 00:00:00
rocky
rocky
openssl security update
2023-03-28 13:07:30
fedora
fedora
[SECURITY] Fedora 37 Update: edk2-20221117gitfff6d81270b5-13.fc37
2023-02-16 02:06:48
[SECURITY] Fedora 36 Update: edk2-20221117gitfff6d81270b5-14.fc36
2023-03-05 00:54:06
slackware
slackware
[slackware-security] openssl
2023-02-07 20:57:57
debian
debian
[SECURITY] [DSA 5343-1] openssl security update
2023-02-07 21:05:48
[SECURITY] [DLA 3325-1] openssl security update
2023-02-20 11:11:44
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0530
2023-02-10 00:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

53.6%

JSON
Related for VERACODE:39202
nessus61ubuntucve1cbl_mariner6openvas39ibm31osv8redhatcve1cve1cgr1prion1github1debiancve1cvelist1alpinelinux1hackerone1openssl1rustsec1f51ics5githubexploit1wolfi1redhat7amazon3altlinux2almalinux3oraclelinux9freebsd_advisory1freebsd1redos1rocky1fedora2slackware1debian2photon1