CVE-2019-14318
published 2019-07-30CVE-2019-14318: Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration…
PriorityP432medium5.9CVSS 3.0
AVNACHPRNUINSUCHINAN
EPSS
3.25%
87.1th percentile
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cryptopp | crypto | <= 8.4.0 | — |
| cryptopp | crypto | <= 8.3.0 | — |
| debian | libcrypto | < libcrypto++ 5.6.4-9 (bookworm) | libcrypto++ 5.6.4-9 (bookworm) |
| debian | libcrypto | — | — |
CVSS provenance
nvdv3.05.9MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv5.9MEDIUM
vendor_debian5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-48570: Crypto++ through 8
osv·2023-08-22·CVSS 5.9
CVE-2022-48570 [MEDIUM] CVE-2022-48570: Crypto++ through 8
Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons.
GHSA
GHSA-mgx5-qmrg-fjwp: Crypto++ through 8
ghsa_unreviewed·2023-08-22·CVSS 5.9
CVE-2022-48570 [MEDIUM] CWE-787 GHSA-mgx5-qmrg-fjwp: Crypto++ through 8
Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons.
GHSA
GHSA-j77v-9g36-cfp2: Crypto++ 8
ghsa_unreviewed·2022-05-24
CVE-2019-14318 [MEDIUM] GHSA-j77v-9g36-cfp2: Crypto++ 8
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
OSV
CVE-2019-14318: Crypto++ 8
osv·2019-07-30·CVSS 5.9
CVE-2019-14318 [MEDIUM] CVE-2019-14318: Crypto++ 8
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
Debian
CVE-2022-48570: libcrypto++ - Crypto++ through 8.4 contains a timing side channel in ECDSA signature generatio...
vendor_debian·2022·CVSS 5.9
CVE-2022-48570 [MEDIUM] CVE-2022-48570: libcrypto++ - Crypto++ through 8.4 contains a timing side channel in ECDSA signature generatio...
Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
Debian
CVE-2019-14318: libcrypto++ - Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature gen...
vendor_debian·2019·CVSS 5.9
CVE-2019-14318 [MEDIUM] CVE-2019-14318: libcrypto++ - Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature gen...
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
Scope: local
bookworm: resolved (fixed in 5.6.4-9)
bullseye: resolved (fixed in 5.6.4-9)
forky: resolved (fixed in 5.6.4-9)
sid: resolved (fixed in 5.6.4-9)
trixie: resolved (fixed in 5.6.4-9)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00066.htmlhttp://www.openwall.com/lists/oss-security/2019/10/02/2https://eprint.iacr.org/2011/232.pdfhttps://github.com/weidai11/cryptopp/issues/869https://minerva.crocs.fi.muni.cz/https://tches.iacr.org/index.php/TCHES/article/view/7337http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00066.htmlhttp://www.openwall.com/lists/oss-security/2019/10/02/2https://eprint.iacr.org/2011/232.pdfhttps://github.com/weidai11/cryptopp/issues/869https://minerva.crocs.fi.muni.cz/https://tches.iacr.org/index.php/TCHES/article/view/7337
2019-07-30
Published