CWE-203 Archives - CVE Vulnerability

CVE-2018-9192

Sun, 26 Feb 2023 06:51:46 +0000

A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server’s private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under SSL Deep Inspection feature when CPx being used.

The post CVE-2018-9192 appeared first on CVE Vulnerability.

CVE-2018-9194

Sun, 26 Feb 2023 06:51:46 +0000

The post CVE-2018-9194 appeared first on CVE Vulnerability.

CVE-2018-5407

Sun, 26 Feb 2023 06:50:19 +0000

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on ‘port contention’.

The post CVE-2018-5407 appeared first on CVE Vulnerability.

CVE-2018-3620

Sun, 26 Feb 2023 06:49:45 +0000

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.

The post CVE-2018-3620 appeared first on CVE Vulnerability.

CVE-2018-3639

Sun, 26 Feb 2023 06:49:45 +0000

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

The post CVE-2018-3639 appeared first on CVE Vulnerability.

CVE-2018-3640

Sun, 26 Feb 2023 06:49:45 +0000

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

The post CVE-2018-3640 appeared first on CVE Vulnerability.

CVE-2018-3615

Sun, 26 Feb 2023 06:49:44 +0000

Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.

The post CVE-2018-3615 appeared first on CVE Vulnerability.

CVE-2018-16868

Sun, 26 Feb 2023 06:47:13 +0000

A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

The post CVE-2018-16868 appeared first on CVE Vulnerability.

CVE-2018-16869

Sun, 26 Feb 2023 06:47:13 +0000

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

The post CVE-2018-16869 appeared first on CVE Vulnerability.

CVE-2018-10949

Sun, 26 Feb 2023 06:45:03 +0000

mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discrepancy between the “HTTP 404 – account is not active” and “HTTP 401 – must authenticate” errors.

The post CVE-2018-10949 appeared first on CVE Vulnerability.