CVE-2014-4192

The Dual_EC_DRBG implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) processes certain requests for output bytes by considering only the…

published June 17, 2014

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

The Dual_EC_DRBG implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) processes certain requests for output bytes by considering only the requested byte count and not the use of cached bytes, which makes it easier for remote attackers to obtain plaintext from TLS sessions by recovering the algorithm's inner state, a different issue than CVE-2007-6755.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01683 · 76.7th percentile
Published
2014-06-17T15:00Z
EPSS history
Timeline
  • 17 JUN 15:00Z
    The Dual_EC_DRBG implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) processes certain requests for output bytes by considering only the…
    cvelistv5