Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12439

Опубликовано: 15 июн. 2018
Источник: nvd
CVSS3: 4.7
CVSS2: 1.9
EPSS Низкий

Описание

MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:matrixssl:matrixssl:*:*:*:*:*:*:*:*
Версия до 3.9.5 (включая)

EPSS

Процентиль: 18%
0.00058
Низкий

4.7 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.7
ubuntu
больше 7 лет назад

MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

CVSS3: 4.7
debian
больше 7 лет назад

MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack ...

CVSS3: 4.7
github
больше 3 лет назад

MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

EPSS

Процентиль: 18%
0.00058
Низкий

4.7 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-200