Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 112

Export CSV
CVE-2019-16863

hw: ECDSA signature timing vulnerabilities in TPM module

STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL.

CVSS 3.1 · 5.9 Medium EPSS 3.4% KEV · Not listed
Vendors
St
Products
St33tphf20i2c St33tphf20i2c Firmware St33tphf20spi and 5 more
CVE-2019-11090

hw: ECDSA signature timing vulnerabilities in TPM module

Cryptographic timing conditions in the subsystem for Intel(R) PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; Intel(R) TXE 3.1.70 and 4.0.20; Intel(R) SPS before versions SPS_E5_04.01.04.305.0, SPS_SoC-X_04.00.04.108.0, SPS_SoC-A_04.00.04.191.0, SPS_E3_04.01.04.086.0, SPS_E3_04.08.04.047.0 may allow an unauthenticated user to potentially enable information disclosure via network access.

CVSS 3.1 · 5.9 Medium EPSS 2.7% KEV · Not listed
Vendors
Intel
Products
Platform Trust Technology Firmware Server Platform Services Firmware Trusted Execution Engine Firmware
CVE-2019-0162

hw: dram: spoiler attack

Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.0 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Intel
Products
-
CVE-2018-8023

mesos: Exposure of HMAC value via timing vulnerability in JWT validation

Apache Mesos can be configured to require authentication to call the Executor HTTP API using JSON Web Token (JWT). In Apache Mesos versions pre-1.4.2, 1.5.0, 1.5.1, 1.6.0 the comparison of the generated HMAC value against the provided signature in the JWT implementation used is vulnerable to a timing attack because instead of a constant-time string comparison routine a standard `==` operator has been used. A malicious actor can therefore abuse the timing difference of when the JWT validation function returns to reveal the correct HMAC value.

CVSS 3.0 · 5.9 Medium EPSS 3.1% KEV · Not listed
Vendors
Apache
Products
Mesos
CVE-2018-12440

netty-tcnative-boringssl-static: memory-cache side-channel attack on DSA signatures

BoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a DSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

CVSS 3.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google
Products
Boringssl
CVE-2018-10846

gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery

A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of "Just in Time" Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2018-10845

gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant

It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.

CVSS 3.1 · 5.9 Medium EPSS 3.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2018-10844

gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls

It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.

CVSS 3.1 · 5.9 Medium EPSS 3.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2018-1000119

rack-protection: Timing attack in authenticity_token.rb

Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.

CVSS 3.0 · 5.9 Medium EPSS 2.4% KEV · Not listed
Vendors
Redhat Sinatrarb
Products
Enterprise Linux Satellite Satellite Capsule and 1 more
CVE-2017-2585

keycloak: timing attack in JWS signature verification

Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constant time, potentially leaving the application vulnerable to timing attacks.

CVSS 3.0 · 5.9 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Server Jboss Single Sign On Keycloak and 2 more
CVE-2016-7056

openssl: ECDSA P-256 timing attack key recovery

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Openssl and 1 more
Products
Ubuntu Linux Debian Linux Openssl and 3 more