Описание
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
It was found that nettle's RSA and DSA decryption code was vulnerable to cache-related side channel attacks. An attacker could use this flaw to recover the private key from a co-located virtual-machine instance.
Дополнительная информация
Статус:
Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1362016nettle: RSA/DSA code is vulnerable to cache-timing related attacks
EPSS
Процентиль: 82%
0.01684
Низкий
7.4 High
CVSS3
5.8 Medium
CVSS2
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 8 лет назад
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
CVSS3: 7.5
nvd
больше 8 лет назад
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
CVSS3: 7.5
debian
больше 8 лет назад
The RSA and DSA decryption code in Nettle makes it easier for attacker ...
EPSS
Процентиль: 82%
0.01684
Низкий
7.4 High
CVSS3
5.8 Medium
CVSS2