All errata/sisyphus/ALT-PU-2018-2022-1
ALT-PU-2018-2022-1

Package update libtomcrypt in branch sisyphus

Version1.18.2-alt1
Published2018-07-16
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2018-12437
MEDIUM4.9

LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Published: 2018-06-15Modified: 2024-11-21
CVSS 2.0LOW 1.9
CVSS:2.0/AV:L/AC:M/Au:N/C:P/I:N/A:N
CVSS 3.xMEDIUM 4.9
CVSS:3.x/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N