Covert Timing Channel

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable T

• Без аутентификации

dell · bsafe crypto-c-micro-edition11 июл. 2022 г.

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Tim

• Без аутентификации

dell · bsafe crypto-c-micro-edition11 июл. 2022 г.

Non-constant time comparisons risk private key leakage in FrodoKEM.

• Без аутентификации

legion of the bouncy castle inc. · bc-java15 апр. 2026 г.

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Tim

• Без аутентификации

dell · bsafe crypto-c-micro-edition11 июл. 2022 г.

Observable Timing Discrepancy in pypqc

• Без аутентификации

PyPI · pypqc5 июн. 2024 г.

Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the p

• Локальное повышение привилегий

linux · linux kernel24 июл. 2023 г.

RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite

• Без аутентификации

dell · bsafe crypto-c-micro-edition30 сент. 2019 г.

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the a

dell · bsafe ssl-j23 февр. 2022 г.

Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability.

• Без аутентификации
• Отказ в обслуживании

dell · powerscale onefs25 мар. 2024 г.

vLLM vulnerable to timing attack at bearer auth

• Без аутентификации
• Обход аутентификации

vllm · vllm7 окт. 2025 г.

Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are

• Без аутентификации

nodejs · node7 сент. 2024 г.

Ruby: openssl: ruby marvin attack

• Без аутентификации

red hat · red hat enterprise linux 109 янв. 2025 г.

It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies.

x.org · x server27 июл. 2018 г.

Timing side-channel in SM2 algorithm on 64 bit ARM

• Без аутентификации

openssl · openssl30 сент. 2025 г.

PostgreSQL discloses MD5-hashed passwords via covert timing channel

• Без аутентификации

postgresql · postgresql14 мая 2026 г.

It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack.

• Без аутентификации

gnu · gnutls22 авг. 2018 г.

It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack.

• Без аутентификации

gnu · gnutls22 авг. 2018 г.

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5

• Без аутентификации

cryptography.io · cryptography11 янв. 2021 г.

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API

• Без аутентификации

m2crypto project · m2crypto12 янв. 2021 г.

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks.

• Без аутентификации

python-rsa project · python-rsa12 нояб. 2020 г.

Libgcrypt: vulnerable to marvin attack

• Без аутентификации

red hat · red hat enterprise linux 96 мар. 2024 г.

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption

• Без аутентификации

es · iperf314 мая 2024 г.

RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels

• Без аутентификации

rustcrypto · rsa28 нояб. 2023 г.

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 priva

openssl · openssl10 сент. 2018 г.

A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found.

gnu · gnutls22 авг. 2018 г.