CVE-2016-0702 in Xcode

Resumen (Inglés)

The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a "CacheBleed" attack.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2015-12-16

Divulgación

2016-03-02

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
93151	Apple Xcode Node.js divulgación de información	200	No está definido	Arreglo oficial	CVE-2016-0702
90006	Oracle Communications Session Border Controller Encryption divulgación de información	200	No está definido	Arreglo oficial	CVE-2016-0702
81145	OpenSSL Intel Sandy-Bridge Microarchitecture Key divulgación de información	200	No probado	Arreglo oficial	CVE-2016-0702

Fuentes

• MITRE
• NVD
• CVE Details