Lucene search
RootSSV:61920HistoryMar 25, 2014 - 12:00 a.m.
OpenSSL ECDSA Nonces恢复漏洞
2014-03-2500:00:00
Root
www.seebug.org
35
EPSS
0.001
Percentile
17.0%
CVE ID:CVE-2014-0076
OpenSSL是一款开放源码的SSL实现，用来实现网络通信的高强度加密。
OpenSSL椭圆曲线签名与校验(ECDSA)实现存在错误，允许攻击者通过FLUSH+RELOAD缓存边道攻击来获取nonce值并之后得出私钥。
0
OpenSSL 1.x
用户可参考厂商的GIT库以获得补丁修复此漏洞：
http://www.openssl.org/
Related
nessus
nessus
SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 9073)
2014-04-17 00:00:00
SUSE SLES10 Security Update : OpenSSL (SUSE-SU-2014:0539-1)
2015-05-20 00:00:00
openSUSE Security Update : openssl (openSUSE-SU-2014:0480-1)
2014-06-13 00:00:00
f5
f5
SOL15295 - OpenSSL vulnerability CVE-2014-0076
2014-05-29 00:00:00
K15295 : OpenSSL vulnerability CVE-2014-0076
2014-05-29 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2014-0076
2014-02-14 00:00:00
nvd
nvd
CVE-2014-0076
2014-03-25 13:25:21
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:0538-1)
2021-06-09 00:00:00
Juniper Networks Junos OS OpenSSL Information Disclosure Vulnerability
2015-01-23 00:00:00
OpenSSL Information Disclosure Vulnerability (20140605 - 2) - Linux
2021-07-30 00:00:00
ubuntucve
ubuntucve
CVE-2014-0076
2014-03-25 00:00:00
ibm
ibm
debiancve
debiancve
CVE-2014-0076
2014-03-25 13:25:21
veracode
veracode
Side-channel Timing Attack
2017-02-08 02:53:24
prion
prion
Design/Logic Flaw
2014-03-25 13:25:00
cve
cve
CVE-2014-0076
2014-03-25 13:25:21
freebsd
freebsd
OpenSSL -- Local Information Disclosure
2014-04-07 00:00:00
cvelist
cvelist
CVE-2014-0076
2014-03-25 01:00:00
threatpost
threatpost
Second NSA Crypto Tool Found in RSA BSafe
2014-03-31 15:59:27
mageia
mageia
Updated openssl package fix two security vulnerabilities
2014-04-08 11:58:47
securityvulns
securityvulns
[USN-2165-1] OpenSSL vulnerabilities
2014-04-08 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:06.openssl [REVISED]
2014-04-20 00:00:00
OpenSSL security vulnerabilities
2014-05-30 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1g-alt1
2014-04-07 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.1g-alt1
2014-04-07 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.1g-alt1
2014-04-07 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-04-07 00:00:00
vmware
vmware
VMware product updates address OpenSSL security vulnerabilities
2014-04-14 00:00:00
VMware product updates address OpenSSL security vulnerabilities
2014-04-14 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:06.openssl
2014-04-08 00:00:00
slackware
slackware
[slackware-security] openssl
2014-04-08 15:05:22
debian
debian
[SECURITY] [DSA 2908-1] openssl security update
2014-04-17 21:28:20
openssl security update
2014-06-05 19:36:04
openssl security update
2014-06-05 19:36:19
gentoo
gentoo
OpenSSL: Information Disclosure
2014-04-08 00:00:00
osv
osv
openssl - security update
2014-04-17 00:00:00
openssl - security update
2014-06-05 00:00:00
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
2024-06-15 00:00:00
suse
suse
Security update for OpenSSL (critical)
2014-06-06 01:05:59
Security update for libopenssl0_9_8 (important)
2016-03-03 14:11:44
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
2014-06-05 22:40:00
intel
intel
fortinet
fortinet
Multiple Vulnerabilities in OpenSSL
2014-06-06 00:00:00
huawei
huawei
Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products
2014-06-13 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
ics
ics
Rockwell Automation Stratix 5900
2017-05-10 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00