CVE-2018-0495

Published: Jun 13, 2018Modified: Nov 21, 2024

4.7

Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.0 / Impact: 3.6

Source: NVD

Description

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Affected (15)

Products: Gnupg: Libgcrypt · Canonical: Ubuntu Linux · Debian: Debian Linux · +2 more

Show all products

Gnupg: Libgcrypt · Canonical: Ubuntu Linux · Debian: Debian Linux · Redhat: Ansible Tower, Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation · Oracle: Traffic Director

1 product

1 product

1 product

4 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

Oracle

1 product

Traffic Director

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Gnupg Libgcrypt	Before 1.7.10
Gnupg Libgcrypt	From 1.8.0 to 1.8.3

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 17.10
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 18.10

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Ansible Tower	Version 3.3
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 7.0

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Traffic Director	Version 11.1.1.9.0

Related CWEs

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (42)

http://www.securitytracker.com/id/1041144

Source: security@debian.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041147

Source: security@debian.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2018:3221

Source: security@debian.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3505

Source: security@debian.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1296

Source: security@debian.org

https://access.redhat.com/errata/RHSA-2019:1297

Source: security@debian.org

https://access.redhat.com/errata/RHSA-2019:1543

Source: security@debian.org

https://access.redhat.com/errata/RHSA-2019:2237

Source: security@debian.org

https://dev.gnupg.org/T4011

Source: security@debian.org

PatchVendor Advisory

https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=9010d1576e278a4274ad3f4aa15776c28f6ba965

Source: security@debian.org

https://lists.debian.org/debian-lts-announce/2018/06/msg00013.html

Source: security@debian.org

Mailing ListThird Party Advisory

https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html

Source: security@debian.org

Vendor Advisory

https://usn.ubuntu.com/3689-1/

Source: security@debian.org

Third Party Advisory

https://usn.ubuntu.com/3689-2/

Source: security@debian.org

Third Party Advisory

https://usn.ubuntu.com/3692-1/

Source: security@debian.org

Third Party Advisory

https://usn.ubuntu.com/3692-2/

Source: security@debian.org

Third Party Advisory

https://usn.ubuntu.com/3850-1/

Source: security@debian.org

Third Party Advisory

https://usn.ubuntu.com/3850-2/

Source: security@debian.org

Third Party Advisory

https://www.debian.org/security/2018/dsa-4231

Source: security@debian.org

Third Party Advisory

https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/

Source: security@debian.org

ExploitThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Source: security@debian.org

PatchThird Party Advisory

http://www.securitytracker.com/id/1041144