Vulnerability Details : CVE-2018-0495
Potential exploit
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Products affected by CVE-2018-0495
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:traffic_director:11.1.1.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*
- cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-0495
0.31%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 54 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-0495
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
1.9
|
LOW | AV:L/AC:M/Au:N/C:P/I:N/A:N |
3.4
|
2.9
|
NIST | |
|
4.7
|
MEDIUM | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
1.0
|
3.6
|
NIST |
CWE ids for CVE-2018-0495
-
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-0495
-
http://www.securitytracker.com/id/1041144
Libgcrypt ECDSA Signature Calculation Timing Flaw Lets Local Users Obtain Private DSA Keys on the Target System - SecurityTrackerThird Party Advisory;VDB Entry
-
https://usn.ubuntu.com/3692-2/
USN-3692-2: OpenSSL vulnerabilities | Ubuntu security noticesThird Party Advisory
-
https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html
[Announce] Libgcrypt 1.8.3 and 1.7.10 to fix CVE-2018-0495Vendor Advisory
-
https://usn.ubuntu.com/3692-1/
USN-3692-1: OpenSSL vulnerabilities | Ubuntu security noticesThird Party Advisory
-
https://access.redhat.com/errata/RHSA-2019:1297
RHSA-2019:1297 - Security Advisory - Red Hat Customer Portal
-
https://www.debian.org/security/2018/dsa-4231
Debian -- Security Information -- DSA-4231-1 libgcrypt20Third Party Advisory
-
https://usn.ubuntu.com/3850-2/
USN-3850-2: NSS vulnerabilities | Ubuntu security noticesThird Party Advisory
-
https://access.redhat.com/errata/RHSA-2018:3505
RHSA-2018:3505 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
Technical Advisory: "ROHNP"- Key Extraction Side Channel in Multiple Crypto LibrariesExploit;Third Party Advisory
-
http://www.securitytracker.com/id/1041147
OpenBSD ECDSA Signature Calculation Timing Flaw Lets Local Users Obtain Private DSA Keys on the Target System - SecurityTrackerThird Party Advisory;VDB Entry
-
https://lists.debian.org/debian-lts-announce/2018/06/msg00013.html
[SECURITY] [DLA 1405-1] libgcrypt20 security updateMailing List;Third Party Advisory
-
https://access.redhat.com/errata/RHSA-2019:2237
RHSA-2019:2237 - Security Advisory - Red Hat Customer Portal
-
https://usn.ubuntu.com/3850-1/
USN-3850-1: NSS vulnerabilities | Ubuntu security noticesThird Party Advisory
-
https://access.redhat.com/errata/RHSA-2019:1296
RHSA-2019:1296 - Security Advisory - Red Hat Customer Portal
-
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
Oracle Critical Patch Update - April 2019Patch;Third Party Advisory
-
https://dev.gnupg.org/T4011
⚓ T4011 CVE-2018-0495Patch;Vendor Advisory
-
https://access.redhat.com/errata/RHSA-2018:3221
RHSA-2018:3221 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
https://access.redhat.com/errata/RHSA-2019:1543
RHSA-2019:1543 - Security Advisory - Red Hat Customer Portal
-
https://usn.ubuntu.com/3689-1/
USN-3689-1: Libgcrypt vulnerability | Ubuntu security noticesThird Party Advisory
-
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=9010d1576e278a4274ad3f4aa15776c28f6ba965
git.gnupg.org Git - libgcrypt.git/commitPatch;Vendor Advisory
-
https://usn.ubuntu.com/3689-2/
USN-3689-2: Libgcrypt vulnerability | Ubuntu security noticesThird Party Advisory
Jump to