medium4.9
CVE-2018-12437
LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP.
Impact
LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libtom | Libtomcrypt | through 1.18.1 |
| Trustedfirmware | Op-Tee | through 3.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://security.gentoo.org/glsa/202007-53
- https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
- https://security.gentoo.org/glsa/202007-53
- https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/