CVE-2014-0076

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.

Score

CVSS 2.0 1.9 Low

Status

Modified - secalert@redhat.com

Published

2014-03-25

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Openssl (Openssl)

References

• http://advisories.mageia.org/MGASA-2014-0165.html
• http://eprint.iacr.org/2014/140
• http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=2198be3483259de374f91e57d247d0fc667aef29
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
• http://lists.opensuse.org/opensuse-updates/2014-04/msg00007.html
• http://marc.info/?l=bugtraq&m=140266410314613&w=2
• http://marc.info/?l=bugtraq&m=140317760000786&w=2
• http://marc.info/?l=bugtraq&m=140389274407904&w=2
• http://marc.info/?l=bugtraq&m=140389355508263&w=2
• http://marc.info/?l=bugtraq&m=140448122410568&w=2
• http://marc.info/?l=bugtraq&m=140482916501310&w=2
• http://marc.info/?l=bugtraq&m=140621259019789&w=2
• http://marc.info/?l=bugtraq&m=140752315422991&w=2
• http://marc.info/?l=bugtraq&m=140904544427729&w=2
• http://secunia.com/advisories/58492
• http://secunia.com/advisories/58727
• http://secunia.com/advisories/58939
• http://secunia.com/advisories/59040
• http://secunia.com/advisories/59162
• http://secunia.com/advisories/59175
• http://secunia.com/advisories/59264
• http://secunia.com/advisories/59300
• http://secunia.com/advisories/59364
• http://secunia.com/advisories/59374
• http://secunia.com/advisories/59413
• http://secunia.com/advisories/59438
• http://secunia.com/advisories/59445
• http://secunia.com/advisories/59450
• http://secunia.com/advisories/59454