CVE

Id
93309  
CVE No.
CVE-2016-6489  
Status
Candidate  
Description
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.  
Phase
Assigned (20160728)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793373 93309 CVE-2016-6489 MLIST:[oss-security] 20160729 Re: CVE Request: nettle"s RSA code is vulnerable to cache sharing related attacks  View
793374 93309 CVE-2016-6489 URL:http://www.openwall.com/lists/oss-security/2016/07/29/7  View
793375 93309 CVE-2016-6489 MISC:https://eprint.iacr.org/2016/596.pdf  View
793376 93309 CVE-2016-6489 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1362016  View
793377 93309 CVE-2016-6489 CONFIRM:https://git.lysator.liu.se/nettle/nettle/commit/3fe1d6549765ecfb24f0b80b2ed086fdc818bff3  View
793378 93309 CVE-2016-6489 REDHAT:RHSA-2016:2582  View
793379 93309 CVE-2016-6489 URL:http://rhn.redhat.com/errata/RHSA-2016-2582.html  View
793380 93309 CVE-2016-6489 UBUNTU:USN-3193-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4067 JVNDB-2016-004840 Apache Shiro におけるサーブレットフィルタを回避される脆弱性 Apache Shiro には、サーブレットフィルタを回避され、アクセス権を取得される脆弱性が存在します。 CVE-2016-6802 93309 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004840.html  View