CVE-2018-0495 — Observable Discrepancy in Libgcrypt

CWE-203 — Observable DiscrepancyCWE-200 — Sensitive Information ExposureCWE-385 — Covert Timing Channel32 documents8 sources
Severity
4.7MEDIUMNVD
EPSS
0.3%
top 50.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Gnupg LibgcryptMozilla NSSOpenssl+7 more
Timeline
PublishedJun 13
Latest updateMay 13

Description

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.0 | Impact: 3.6

Affected Packages8 packages

▶NVDgnupg/libgcrypt1.8.0 — 1.8.3+1
▶Ubuntumozilla/nss< 2:3.28.4-0ubuntu0.14.04.4+2
▶Ubuntuopenssl/openssl< 1.0.1f-1ubuntu2.26+2
▶NVDoracle/traffic_director11.1.1.9.0

Also affects: Debian Linux 8.0, 9.0, Ubuntu Linux 12.04, 14.04, 16.04, 17.10, 18.04, 18.10

Patches

Patch: dev.gnupg.org ↗Patch: www.oracle.com ↗Patch: dev.gnupg.org ↗

🔴Vulnerability Details

5
GHSA
GHSA-q2v2-pgm4-m8c8: Libgcrypt before 1↗2022-05-13
▶
OSV
nss vulnerabilities↗2019-01-09
▶
OSV
openssl, openssl1.0 vulnerabilities↗2018-06-26
▶
CVEList
CVE-2018-0495: Libgcrypt before 1↗2018-06-13
▶
OSV
CVE-2018-0495: Libgcrypt before 1↗2018-06-13
▶

📋Vendor Advisories

9
Ubuntu
NSS vulnerabilities↗2019-02-18
▶
Ubuntu
NSS vulnerabilities↗2019-01-09
▶
Ubuntu
OpenSSL vulnerabilities↗2018-06-26
▶
Ubuntu
OpenSSL vulnerabilities↗2018-06-26
▶
Ubuntu
Libgcrypt vulnerability↗2018-06-19
▶

💬Community

17
Bugzilla
CVE-2018-0495 CVE-2018-12437 libtomcrypt: various flaws [epel-all]↗2018-06-15
▶
Bugzilla
CVE-2018-0495 CVE-2018-12437 libtomcrypt: various flaws [fedora-all]↗2018-06-15
▶
Bugzilla
CVE-2018-12435 botan: memory-cache side-channel attack on ECDSA signatures↗2018-06-15
▶
Bugzilla
CVE-2018-0495 nss: openssl: ROHNP - Key Extraction Side Channel in Multiple Crypto Libraries [fedora-all]↗2018-06-14
▶
Bugzilla
CVE-2018-0495 cryptlib: openssl: ROHNP - Key Extraction Side Channel in Multiple Crypto Libraries [fedora-all]↗2018-06-14
▶
CVE-2018-0495 — Observable Discrepancy in Libgcrypt | cvebase