CVE Feed

    Dashboard / CVE / CVE-2018-16869

    CVE-2018-16869

    A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

    Published:Nov 30, 2018
    Last Modified:Nov 21, 2024
    EPS:Dec 3, 2018
    EPSS Score:0.00158
    CVSS Score:5.7

    Affected Products

    Vendor
    Nettle Project
    Product
    Nettle

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-203 Observable Discrepancy

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-189 Black Box Reverse Engineering

    Related CVEs

    CVE-2023-36660 (CVSS 9.8) — The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.…
    CVE-2021-3580 (CVSS 7.5) — A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacke…
    CVE-2021-20305 (CVSS 8.1) — A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GO…
    CVE-2016-6489 (CVSS 7.5) — The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache s…
    CVE-2015-8803 (CVSS 9.8) — The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and pro…
    CVE-2015-8804 (CVSS 9.8) — x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect…
    CVE-2015-8805 (CVSS 9.8) — The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and pro…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High