Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

TI-2022-03942 CVE-2022-4304 · GHSA-p52g-cm5j-mjv4

Timing Oracle in RSA Decryption

Priority MEDIUM 47

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.23509 Published 2023-02-08 Partial fix · 3.0.8, 1.1.1t +3 CWE-203