QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-7056

Back to search

CVE-2016-7056

Published: Sep 10, 2018

Modified: Aug 6, 2024

PUBLISHED

CVSS v3.0

5.5

MEDIUM

Description

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.

VendorProductVersions

The OpenSSL Project

openssl

affected
openssl 1.0.1u

Weaknesses (CWE)

CWE-385

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

References

RHSA-2017:1801
vendor-advisory
x_refsource_REDHAT
RHSA-2017:1413
vendor-advisory
x_refsource_REDHAT
1037575
vdb-entry
x_refsource_SECTRACK
RHSA-2017:1414
vendor-advisory
x_refsource_REDHAT
DSA-3773
vendor-advisory
x_refsource_DEBIAN
95375
vdb-entry
x_refsource_BID
RHSA-2017:1415
vendor-advisory
x_refsource_REDHAT
RHSA-2017:1802
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now