Description

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.

Remediation

References

CVE-2014-0076

Related Vulnerabilities

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23207)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10513)

WordPress Plugin DZS Video Gallery Multiple Cross-Site Scripting Vulnerabilities (All)

Osclass Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5163)

WordPress Plugin Gallery PhotoBlocks Unspecified Vulnerability (1.1.32)

Severity

Low

Classification

CVE-2014-0076

Tags

Missing Update Known Vulnerabilities