IM
IronMonkey Threat Research

CVE-2018-0495 MEDIUM

Published: 2018-06-13 | Last Modified: 2026-06-17 | Status: Modified

Description

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Additional Descriptions (1)

Libgcrypt en versiones anteriores a la 1.7.10 y versiones 1.8.x anteriores a la 1.8.3 permite un ataque de canal lateral por caché de memoria en las firmas ECDSA que se puede mitigar mediante el uso de la ocultación durante el proceso de firmado en la función _gcry_ecc_ecdsa_sign en cipher/ecc-ecdsa.c. Esto también se conoce como Return Of the Hidden Number Problem o ROHNP. Para descubrir una clave ECDSA, el atacante necesita acceso a la máquina local o a una máquina virtual diferente en el mismo host físico.

CVSS Metrics

Base Score: 1.9 (LOW)

AV:L/AC:M/Au:N/C:P/I:N/A:N

Access VectorLOCAL
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.4

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-203

Affected Products

Vendor Product Version Update Type
gnupg libgcrypt * <built-in method update of dict object at 0x7fd340af6c00> Application
gnupg libgcrypt * <built-in method update of dict object at 0x7fd340af5080> Application
canonical ubuntu_linux 12.04 <built-in method update of dict object at 0x7fd34088d440> Operating System
canonical ubuntu_linux 14.04 <built-in method update of dict object at 0x7fd36a705b40> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd340af6c80> Operating System
canonical ubuntu_linux 17.10 <built-in method update of dict object at 0x7fd340af5940> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd34b8db8c0> Operating System
canonical ubuntu_linux 18.10 <built-in method update of dict object at 0x7fd340af5f80> Operating System
debian debian_linux 8.0 <built-in method update of dict object at 0x7fd340af6100> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd340af6940> Operating System
redhat ansible_tower 3.3 <built-in method update of dict object at 0x7fd3412bb500> Application
redhat enterprise_linux_desktop 7.0 <built-in method update of dict object at 0x7fd340af7780> Operating System
redhat enterprise_linux_server 7.0 <built-in method update of dict object at 0x7fd2d3af4700> Operating System
redhat enterprise_linux_workstation 7.0 <built-in method update of dict object at 0x7fd3703a0940> Operating System
oracle traffic_director 11.1.1.9.0 <built-in method update of dict object at 0x7fd34088d040> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:traffic_director:11.1.1.9.0:*:*:*:*:*:*:*

References