CVE-2014-0076 in Mac OS X
Zusammenfassung (Englisch)
The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservieren
03.12.2013
Veröffentlichung
25.03.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE: