[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247974

 
 

909

 
 

194654

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2018-1000 --- openssl

ID: oval:org.secpod.oval:def:1600875Date: (C)2018-04-23   (M)2024-01-29
Class: PATCHFamily: unix




RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys:OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key

Platform:
Amazon Linux AMI
Product:
openssl
Reference:
ALAS-2018-1000
CVE-2018-0737
CVE    1
CVE-2018-0737
CPE    2
cpe:/o:amazon:linux
cpe:/a:openssl:openssl

© SecPod Technologies