CVE-2014-4191

The TLS implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) sends a long series of random bytes during use of the Dual_EC_DRBG algorithm…

published June 17, 2014

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

The TLS implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) sends a long series of random bytes during use of the Dual_EC_DRBG algorithm, which makes it easier for remote attackers to obtain plaintext from TLS sessions by recovering the algorithm's inner state, a different issue than CVE-2007-6755.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01730 · 77.3th percentile
Published
2014-06-17T15:00Z
EPSS history
Timeline
  • 17 JUN 15:00Z
    The TLS implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) sends a long series of random bytes during use of the Dual_EC_DRBG algorithm…
    cvelistv5