CVE-2017-1000385 in otp TLS Serverالمعلومات

الملخص

بحسب MITRE

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).

If you want to get best quality of vulnerability data, you may have to visit VulDB.

حجز

29/11/2017

إفشاء

12/12/2017

الاعتدال

تمت الموافقة

إدخال

VDB-110521

EPSS

0.22098

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you need the next level of professionalism?

Upgrade your account now!