Covert Timing Channel

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable T

• Pre-auth

dell · bsafe crypto-c-micro-editionJul 11, 2022

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Tim

• Pre-auth

dell · bsafe crypto-c-micro-editionJul 11, 2022

Non-constant time comparisons risk private key leakage in FrodoKEM.

• Pre-auth

legion of the bouncy castle inc. · bc-javaApr 15, 2026

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Tim

• Pre-auth

dell · bsafe crypto-c-micro-editionJul 11, 2022

Observable Timing Discrepancy in pypqc

• Pre-auth

PyPI · pypqcJun 5, 2024

Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the p

• Local privilege escalation

linux · linux kernelJul 24, 2023

RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite

• Pre-auth

dell · bsafe crypto-c-micro-editionSep 30, 2019

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the a

dell · bsafe ssl-jFeb 23, 2022

Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability.

• Pre-auth
• Denial of service

dell · powerscale onefsMar 25, 2024

vLLM vulnerable to timing attack at bearer auth

• Pre-auth
• Auth bypass

vllm · vllmOct 7, 2025

Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are

• Pre-auth

nodejs · nodeSep 7, 2024

Ruby: openssl: ruby marvin attack

• Pre-auth

red hat · red hat enterprise linux 10Jan 9, 2025

It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies.

x.org · x serverJul 27, 2018

Timing side-channel in SM2 algorithm on 64 bit ARM

• Pre-auth

openssl · opensslSep 30, 2025

PostgreSQL discloses MD5-hashed passwords via covert timing channel

• Pre-auth

postgresql · postgresqlMay 14, 2026

It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack.

• Pre-auth

gnu · gnutlsAug 22, 2018

It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack.

• Pre-auth

gnu · gnutlsAug 22, 2018

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5

• Pre-auth

cryptography.io · cryptographyJan 11, 2021

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API

• Pre-auth

m2crypto project · m2cryptoJan 12, 2021

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks.

• Pre-auth

python-rsa project · python-rsaNov 12, 2020

Libgcrypt: vulnerable to marvin attack

• Pre-auth

red hat · red hat enterprise linux 9Mar 6, 2024

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption

• Pre-auth

es · iperf3May 14, 2024

RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels

• Pre-auth

rustcrypto · rsaNov 28, 2023

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 priva

openssl · opensslSep 10, 2018

A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found.

gnu · gnutlsAug 22, 2018