CVE-2018-16869CWE-203

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data

Medium · published December 3, 2018

CVSS v3.0
4.7
EPSS
1%
Percentile
74.0
In the wild
Unconfirmed
What it is

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

The record
Technical detail
CVSS v3.0
4.7 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01495 · 74.0th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2018-12-03T14:00Z
EPSS history
Timeline
  • 03 DEC 14:00Z
    A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data
    cvelistv5