CVE-2014-0076

Published: Mar 25, 2014Modified: May 6, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.

Affected (96)

Products: Openssl: Openssl

Openssl

1 product

Openssl

Configuration A

96 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Up to 1.0.0l
Openssl Openssl	Version 0.9.1c
Openssl Openssl	Version 0.9.2b
Openssl Openssl	Version 0.9.3
Openssl Openssl	Version 0.9.3a
Openssl Openssl	Version 0.9.4
Openssl Openssl	Version 0.9.5
Openssl Openssl	Version 0.9.5 beta1
Openssl Openssl	Version 0.9.5 beta2
Openssl Openssl	Version 0.9.5a
Openssl Openssl	Version 0.9.5a beta1
Openssl Openssl	Version 0.9.5a beta2
Openssl Openssl	Version 0.9.6
Openssl Openssl	Version 0.9.6 beta1
Openssl Openssl	Version 0.9.6 beta2
Openssl Openssl	Version 0.9.6 beta3
Openssl Openssl	Version 0.9.6a
Openssl Openssl	Version 0.9.6a beta1
Openssl Openssl	Version 0.9.6a beta2
Openssl Openssl	Version 0.9.6a beta3
Openssl Openssl	Version 0.9.6b
Openssl Openssl	Version 0.9.6c
Openssl Openssl	Version 0.9.6d
Openssl Openssl	Version 0.9.6e
Openssl Openssl	Version 0.9.6f
Openssl Openssl	Version 0.9.6g
Openssl Openssl	Version 0.9.6h
Openssl Openssl	Version 0.9.6i
Openssl Openssl	Version 0.9.6j
Openssl Openssl	Version 0.9.6k
Openssl Openssl	Version 0.9.6l
Openssl Openssl	Version 0.9.6m
Openssl Openssl	Version 0.9.7
Openssl Openssl	Version 0.9.7 beta1
Openssl Openssl	Version 0.9.7 beta2
Openssl Openssl	Version 0.9.7 beta3
Openssl Openssl	Version 0.9.7 beta4
Openssl Openssl	Version 0.9.7 beta5
Openssl Openssl	Version 0.9.7 beta6
Openssl Openssl	Version 0.9.7a
Openssl Openssl	Version 0.9.7b
Openssl Openssl	Version 0.9.7c
Openssl Openssl	Version 0.9.7d
Openssl Openssl	Version 0.9.7e
Openssl Openssl	Version 0.9.7f
Openssl Openssl	Version 0.9.7g
Openssl Openssl	Version 0.9.7h
Openssl Openssl	Version 0.9.7i
Openssl Openssl	Version 0.9.7j
Openssl Openssl	Version 0.9.7k
Openssl Openssl	Version 0.9.7l
Openssl Openssl	Version 0.9.7m
Openssl Openssl	Version 0.9.8
Openssl Openssl	Version 0.9.8a
Openssl Openssl	Version 0.9.8b
Openssl Openssl	Version 0.9.8c
Openssl Openssl	Version 0.9.8d
Openssl Openssl	Version 0.9.8e
Openssl Openssl	Version 0.9.8f
Openssl Openssl	Version 0.9.8g
Openssl Openssl	Version 0.9.8h
Openssl Openssl	Version 0.9.8i
Openssl Openssl	Version 0.9.8j
Openssl Openssl	Version 0.9.8k
Openssl Openssl	Version 0.9.8l
Openssl Openssl	Version 0.9.8m
Openssl Openssl	Version 0.9.8m beta1
Openssl Openssl	Version 0.9.8n
Openssl Openssl	Version 0.9.8o
Openssl Openssl	Version 0.9.8p
Openssl Openssl	Version 0.9.8q
Openssl Openssl	Version 0.9.8r
Openssl Openssl	Version 0.9.8s
Openssl Openssl	Version 0.9.8t
Openssl Openssl	Version 0.9.8u
Openssl Openssl	Version 0.9.8v
Openssl Openssl	Version 0.9.8w
Openssl Openssl	Version 0.9.8x
Openssl Openssl	Version 0.9.8y
Openssl Openssl	Version 1.0.0
Openssl Openssl	Version 1.0.0 beta1
Openssl Openssl	Version 1.0.0 beta2
Openssl Openssl	Version 1.0.0 beta3
Openssl Openssl	Version 1.0.0 beta4
Openssl Openssl	Version 1.0.0 beta5
Openssl Openssl	Version 1.0.0a
Openssl Openssl	Version 1.0.0b
Openssl Openssl	Version 1.0.0c
Openssl Openssl	Version 1.0.0d
Openssl Openssl	Version 1.0.0e
Openssl Openssl	Version 1.0.0f
Openssl Openssl	Version 1.0.0g
Openssl Openssl	Version 1.0.0h
Openssl Openssl	Version 1.0.0i
Openssl Openssl	Version 1.0.0j
Openssl Openssl	Version 1.0.0k

Related CWEs

CWE-310

References (128)

http://advisories.mageia.org/MGASA-2014-0165.html

Source: secalert@redhat.com

http://eprint.iacr.org/2014/140

Source: secalert@redhat.com

http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=2198be3483259de374f91e57d247d0fc667aef29

Source: secalert@redhat.com

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2014-04/msg00007.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=140266410314613&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=140317760000786&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=140389274407904&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=140389355508263&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=140448122410568&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=140482916501310&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=140621259019789&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=140752315422991&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=140904544427729&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/58492

Source: secalert@redhat.com

http://secunia.com/advisories/58727

Source: secalert@redhat.com

http://secunia.com/advisories/58939

Source: secalert@redhat.com

http://secunia.com/advisories/59040

Source: secalert@redhat.com

http://secunia.com/advisories/59162

Source: secalert@redhat.com

http://secunia.com/advisories/59175

Source: secalert@redhat.com

http://secunia.com/advisories/59264

Source: secalert@redhat.com

http://secunia.com/advisories/59300

Source: secalert@redhat.com

http://secunia.com/advisories/59364

Source: secalert@redhat.com

http://secunia.com/advisories/59374

Source: secalert@redhat.com

http://secunia.com/advisories/59413

Source: secalert@redhat.com

http://secunia.com/advisories/59438

Source: secalert@redhat.com

http://secunia.com/advisories/59445

Source: secalert@redhat.com

http://secunia.com/advisories/59450

Source: secalert@redhat.com

http://secunia.com/advisories/59454

Source: secalert@redhat.com

http://secunia.com/advisories/59490

Source: secalert@redhat.com

http://secunia.com/advisories/59495

Source: secalert@redhat.com

http://secunia.com/advisories/59514

Source: secalert@redhat.com

http://secunia.com/advisories/59655

Source: secalert@redhat.com

http://secunia.com/advisories/59721

Source: secalert@redhat.com

http://secunia.com/advisories/60571

Source: secalert@redhat.com

http://support.apple.com/kb/HT6443

Source: secalert@redhat.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=isg400001841

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=isg400001843

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21673137

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21676035

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21676062

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21676092

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21676419

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21676424

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21676501

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21676655

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21677695

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21677828

Source: secalert@redhat.com

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2014:067

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2015:062

Source: secalert@redhat.com

http://www.novell.com/support/kb/doc.php?id=7015264

Source: secalert@redhat.com

http://www.novell.com/support/kb/doc.php?id=7015300

Source: secalert@redhat.com

http://www.openssl.org/news/secadv_20140605.txt

Source: secalert@redhat.com

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/66363

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2165-1

Source: secalert@redhat.com

https://bugs.gentoo.org/show_bug.cgi?id=505278

Source: secalert@redhat.com

https://bugzilla.novell.com/show_bug.cgi?id=869945

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946

Source: secalert@redhat.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10075

Source: secalert@redhat.com

http://advisories.mageia.org/MGASA-2014-0165.html