Published: 15/06/2018 Updated: 29/06/2021

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

CVSS v3 Base Score: 4.9 | Impact Score: 4 | Exploitability Score: 0.5

VMScore: 169

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

LibTomCrypt up to and including 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtom libtomcrypt
linaro op-tee

Debian Bug report logs - #901626 libtomcrypt: CVE-2018-12437 Package: src:libtomcrypt; Maintainer for src:libtomcrypt is Michael Stapelberg <stapelberg@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 15 Jun 2018 19:24:04 UTC Severity: grave Tags: fixed-upstream, security, upstream Found ...

LibTomCrypt through 1181 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host ...

CWE-200 https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/https://security.gentoo.org/glsa/202007-53 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901626 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-12437

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect