CVE-2018-12439 MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to...
MediumCVSS 4.7
EPSS 0.27%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| matrixssl | <= 3.9.5 | No fix listed |
References
- www.nccgroup.trust third-party-advisory