CVE-2018-12440 BoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a DSA key, the attacker needs access to eith...
MediumCVSS 4.7
EPSS 0.14%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a DSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google boringssl | <= 2018-06-14 | No fix listed |
References
- www.nccgroup.trust third-party-advisory