Filtered by vendor Cryptlib Subscriptions
Filtered by product Cryptlib Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-0202 1 Cryptlib 1 Cryptlib 2024-11-21 5.9 Medium
A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the support for RSA key exchange ciphersuites in TLS (by setting the USE_RSA_SUITES define), it will be vulnerable to the timing variant of the Bleichenbacher attack. An attacker that is able to perform a large number of connections to the server will be able to decrypt RSA ciphertexts or forge signatures using server's certificate.
CVE-2018-12433 1 Cryptlib 1 Cryptlib 2024-11-21 4.9 Medium
cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. NOTE: the vendor does not include side-channel attacks within its threat model