Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:cryptlib:cryptlib:3.4.4:*:*:*:*:*:*:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2024-0202 |
A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the support for RSA key exchange ciphersuites in TLS (by setting the USE_RSA_SUITES define), it will be vulnerable to the timing variant of the Bleichenbacher attack. An attacker that is able to perform a large number of connections to the server will be able to decrypt RSA ciphertexts or forge signatures using server's certificate. Published: February 05, 2024; 4:15:11 PM -0500 |
V3.1: 5.9 MEDIUM V2.0:(not available) |
CVE-2018-12433 |
cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. NOTE: the vendor does not include side-channel attacks within its threat model Published: June 14, 2018; 10:29:00 PM -0400 |
V3.1: 4.9 MEDIUM V2.0: 1.9 LOW |