CVE-2016-3995 — Sensitive Information Exposure in Crypto

CWE-200 — Sensitive Information ExposureCWE-122 — Heap-based Buffer Overflow10 documents6 sources
Severity
7.5HIGHNVD
EPSS
1.0%
top 22.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian LibcryptoCryptopp Crypto
Timeline
PublishedFeb 13
Latest updateMay 17

Description

The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDcryptopp/crypto5.6.3
▶debiandebian/libcrypto< libcrypto++ 5.6.3-6 (bookworm)

Patches

Patch: www.openwall.com ↗Patch: github.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rfvf-996j-mmvf: The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5↗2022-05-17
▶
OSV
CVE-2016-3995: The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5↗2017-02-13
▶

📋Vendor Advisories

2
Red Hat
samba: NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability (ZDI-CAN-3995)↗2016-12-19
▶
Debian
CVE-2016-3995: libcrypto++ - The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::...↗2016
▶

💬Community

5
Bugzilla
CVE-2016-2123 samba: NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability (ZDI-CAN-3995)↗2016-11-08
▶
Bugzilla
CVE-2016-3995 cryptopp: bogus protection from timing attacks [fedora-all]↗2016-04-11
▶
Bugzilla
CVE-2016-3995 cryptopp: bogus protection from timing attacks [epel-7]↗2016-04-11
▶
Bugzilla
CVE-2016-3995 cryptopp: bogus protection from timing attacks [epel-6]↗2016-04-11
▶
Bugzilla
CVE-2016-3995 cryptopp: bogus protection from timing attacks↗2016-04-11
▶
CVE-2016-3995 — Sensitive Information Exposure | cvebase