CVSS 3.7 · Low EPSS 0,24%
Kerentanan Observable Timing Discrepancy pada openssl. Skor CVSS 3.1 3.7 (Low) menurut CISA ADP.
Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| openssl | openssl | Versi 1.1.1 hingga sebelum 1.1.1zj |
| openssl | openssl | Versi 3.0.0 hingga sebelum 3.0.23 |
| openssl | openssl | Versi 3.4.0 hingga sebelum 3.4.8 |
| openssl | openssl | Versi 3.5.0 hingga sebelum 3.5.9 |
| openssl | openssl | Versi 3.6.0 hingga sebelum 3.6.5 |
| openssl | openssl | Versi 4.0.0 hingga sebelum 4.0.3 |