Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2010-0928

Опубликовано: 05 мар. 2010
Источник: ubuntu
Приоритет: negligible
EPSS Низкий
CVSS2: 4

Описание

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack."

РелизСтатусПримечание
dapper

ignored

devel

ignored

hardy

ignored

intrepid

ignored

end of life, was needed
jaunty

ignored

karmic

ignored

lucid

ignored

upstream

ignored

Показывать по

Ссылки на источники

EPSS

Процентиль: 46%
0.00541
Низкий

4 Medium

CVSS2

Связанные уязвимости

redhat
больше 16 лет назад

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack."

nvd
больше 16 лет назад

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack."

debian
больше 16 лет назад

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex- ...

github
больше 4 лет назад

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack."

EPSS

Процентиль: 46%
0.00541
Низкий

4 Medium

CVSS2