Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-575w-jrpq-q9xv

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

EPSS

Процентиль: 29%
0.00106
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-203

Связанные уязвимости

CVSS3: 5.7
ubuntu
около 7 лет назад

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

CVSS3: 4.7
redhat
около 7 лет назад

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

CVSS3: 5.7
nvd
около 7 лет назад

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

CVSS3: 5.7
debian
около 7 лет назад

A Bleichenbacher type side-channel based padding oracle attack was fou ...

suse-cvrf
около 7 лет назад

Security update for libnettle

EPSS

Процентиль: 29%
0.00106
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-203