Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-575w-jrpq-q9xv

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

EPSS

Процентиль: 74%
0.01495
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-203

Связанные уязвимости

CVSS3: 5.7
ubuntu
почти 8 лет назад

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

CVSS3: 4.7
redhat
почти 8 лет назад

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

CVSS3: 5.7
nvd
почти 8 лет назад

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

CVSS3: 5.7
debian
почти 8 лет назад

A Bleichenbacher type side-channel based padding oracle attack was fou ...

suse-cvrf
почти 8 лет назад

Security update for libnettle

EPSS

Процентиль: 74%
0.01495
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-203