Back
CVE-2018-0495
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through…
Medium4.7EPSS 0.87%
- Published
- Updated
- Reserved
- Assigned by
- debian
Description
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.0 | Medium4.7 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
- EPSS (exploitation in 30 days)
- 0.87% · top 41% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.7.
Weakness
- side-channel attack
- CWE-203 (opens in a new tab)All about CWE-203 and its CVEs
Affected products
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3
- affected Libgcrypt before 1.7.10 and 1.8.x before 1.8.3
References (22)
- https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=9010d1576e278a4274ad3f4aa15776c28f6ba965 (opens in a new tab)x_refsource_MISCx_transferred
- 1041144 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- USN-3850-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- 1041147 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/ (opens in a new tab)x_refsource_MISCx_transferred
- USN-3689-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000426.html (opens in a new tab)x_refsource_MISCx_transferred
- USN-3689-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- USN-3692-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- [debian-lts-announce] 20180629 [SECURITY] [DLA 1405-1] libgcrypt20 security update (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- DSA-4231 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- RHSA-2018:3505 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- USN-3850-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- USN-3692-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- RHSA-2018:3221 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- https://dev.gnupg.org/T4011 (opens in a new tab)x_refsource_MISCx_transferred
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html (opens in a new tab)x_refsource_MISCx_transferred
- RHSA-2019:1297 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2019:1296 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2019:1543 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2019:2237 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2018-0495)Record last updated .