TI-2018-02696 Aliases CVE-2018-3691 GHSA-8774-h3c9-hphw

Some implementations in Intel Integrated Performance Primitives Cryptography Library…

LOW 21Published 2018-06-05 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: High · None · None
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time.

Why it matters now

EPSS 0.00288 21st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Intel	Integrated Performance Primitives Cryptography Library	before 2018 U3.1	—	No fix listed	CNA

Integrated Performance Primitives Cryptography Library VendorIntel Affected before 2018 U3.1 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:intel:integrated_performance_primitives_cryptography::::::::	before 2018_u3.1	Vulnerable	Intel

cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:* Versions before 2018_u3.1 Vulnerable ·Intel

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-3691
2026-10-03 Alias added: GHSA-8774-h3c9-hphw

References

Advisory 1

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00106.html

TI-2023-17572 Improper access control in Intel oneAPI DPC++/C++ Compiler software CVSS 3.1HIGH 7.8
TI-2023-08617 Uncontrolled search path in Intel oneAPI Toolkit and component software installers CVSS 3.1HIGH 7.8
TI-2022-09550 Generation of weak initialization vector in an Intel(R) IPP Cryptography software library… CVSS 3.1HIGH 7.5
TI-2023-13593 Incorrect default permissions in Intel C++ Compiler Classic CVSS 3.1MEDIUM 6.0
TI-2024-14466 Uncontrolled search path in Intel IPP Cryptography software CVSS 4.0MEDIUM 5.4
TI-2022-20042 Insufficient control flow management in the Intel(R) IPP Cryptography software before… CVSS 3.1MEDIUM 5.5

See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences