CVEvulnerability

CVE-2018-0495

4.7 MEDIUM Published 2018-06-13 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2018-06-13
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.7 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-203

Description

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Affected configurations

• gnupg libgcrypt (< 1.7.10) • gnupg libgcrypt (>= 1.8.0 < 1.8.3) • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 17.10 • canonical ubuntu linux 18.04 • canonical ubuntu linux 18.10 • debian debian linux 8.0 • debian debian linux 9.0 • redhat ansible tower 3.3 • redhat enterprise linux desktop 7.0 • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 7.0 • oracle traffic director 11.1.1.9.0

Related

Weakness · CWE (1)

  • CWE-203 Observable Discrepancy weakness

References