CWE-385 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-385/ Sun, 26 Feb 2023 06:45:01 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-385 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-385/ 32 32 CVE-2018-10844 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10844/ Sun, 26 Feb 2023 06:45:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10844/ It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.

The post CVE-2018-10844 appeared first on CVE Vulnerability.

]]> It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.

The post CVE-2018-10844 appeared first on CVE Vulnerability.

]]> CVE-2018-10845 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10845/ Sun, 26 Feb 2023 06:45:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10845/ It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.

The post CVE-2018-10845 appeared first on CVE Vulnerability.

]]> It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.

The post CVE-2018-10845 appeared first on CVE Vulnerability.

]]> CVE-2018-10846 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10846/ Sun, 26 Feb 2023 06:45:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10846/ A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of “Just in Time” Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.

The post CVE-2018-10846 appeared first on CVE Vulnerability.

]]> A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of “Just in Time” Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.

The post CVE-2018-10846 appeared first on CVE Vulnerability.

]]> CVE-2020-25657 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-25657/ Sun, 26 Feb 2023 06:39:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-25657/ A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.

The post CVE-2020-25657 appeared first on CVE Vulnerability.

]]> A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.

The post CVE-2020-25657 appeared first on CVE Vulnerability.

]]> CVE-2020-25658 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-25658/ Sun, 26 Feb 2023 06:39:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-25658/ It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

The post CVE-2020-25658 appeared first on CVE Vulnerability.

]]> It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

The post CVE-2020-25658 appeared first on CVE Vulnerability.

]]> CVE-2020-14341 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-14341/ Sun, 26 Feb 2023 06:37:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-14341/ The “Test Connection” available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary hosts and ports of the user’s choosing, and originating from the RHSSO installation. By observing differences in the timings of these scans, an attacker may glean […]

The post CVE-2020-14341 appeared first on CVE Vulnerability.

]]> The “Test Connection” available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary hosts and ports of the user’s choosing, and originating from the RHSSO installation. By observing differences in the timings of these scans, an attacker may glean information about hosts and ports which they do not have access to scan directly.

The post CVE-2020-14341 appeared first on CVE Vulnerability.

]]>