Security Advisory

CVE-2018-12434

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-15 02:00:00
Last updated 2024-09-16 22:52:15
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.