CVE-2018-0495
- State
- Published
- Severity
- Not scored
- Published
- Jun 13, 2018
- Updated
- Oct 14, 2026
- Reserved
- Nov 27, 2017
Description
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3n/a |
|
References
- https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=9010d1576e278a4274ad3f4aa15776c28f6ba965
- 1041144vdb-entry
- USN-3850-1vendor-advisory
- 1041147vdb-entry
- https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
- USN-3689-1vendor-advisory
- https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html
- USN-3689-2vendor-advisory
- USN-3692-2vendor-advisory
- [debian-lts-announce] 20180629 [SECURITY] [DLA 1405-1] libgcrypt20 security updatemailing-list
- DSA-4231vendor-advisory
- RHSA-2018:3505vendor-advisory
- USN-3850-2vendor-advisory
- USN-3692-1vendor-advisory
- RHSA-2018:3221vendor-advisory
- https://dev.gnupg.org/T4011
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- RHSA-2019:1297vendor-advisory
- RHSA-2019:1296vendor-advisory
- RHSA-2019:1543vendor-advisory
- RHSA-2019:2237vendor-advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.