CVE-2018-12437 LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to e...
MediumCVSS 4.9
EPSS 0.54%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libtomcrypt(Debian:12) | < 1.18.2-1 | 1.18.2-1 |
| debian/libtomcrypt(Debian:13) | < 1.18.2-1 | 1.18.2-1 |
| debian/libtomcrypt(Debian:14) | < 1.18.2-1 | 1.18.2-1 |
| libtomcrypt | <= 1.18.1 | No fix listed |
| TrustedFirmware op-tee | <= 3.5.0 | No fix listed |
References
- Debian Security Tracker CVE-2018-12437 vendor-advisory
- GLSA-202007-53 third-party-advisory vendor-advisory
- www.nccgroup.trust exploit technical-description third-party-advisory
- bugs.debian.org issue-tracking