Veracode Vulnerability DatabaseVERACODE:15664Timing Attack
EPSS
Percentile
82.5%
It was discovered that the RSA algorithm in the OpenJDK Security component did not sufficiently preform “blinding” while performing operations using private keys. An attacker able to measure timing differences of those operations could possibly leak information about the keys used.
References
lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
marc.info/?l=bugtraq&m=140852886808946&w=2
marc.info/?l=bugtraq&m=140852974709252&w=2
rhn.redhat.com/errata/RHSA-2015-0264.html
seclists.org/fulldisclosure/2014/Dec/23
secunia.com/advisories/58830
secunia.com/advisories/59404
secunia.com/advisories/59503
secunia.com/advisories/59680
secunia.com/advisories/59924
secunia.com/advisories/59985
secunia.com/advisories/59986
secunia.com/advisories/59987
secunia.com/advisories/60002
secunia.com/advisories/60031
secunia.com/advisories/60032
secunia.com/advisories/60081
secunia.com/advisories/60129
secunia.com/advisories/60245
secunia.com/advisories/60317
secunia.com/advisories/60326
secunia.com/advisories/60335
secunia.com/advisories/60485
secunia.com/advisories/60497
secunia.com/advisories/60622
secunia.com/advisories/60812
secunia.com/advisories/60817
secunia.com/advisories/60831
secunia.com/advisories/60846
secunia.com/advisories/60890
secunia.com/advisories/61050
secunia.com/advisories/61215
secunia.com/advisories/61254
secunia.com/advisories/61264
secunia.com/advisories/61278
secunia.com/advisories/61293
secunia.com/advisories/61294
secunia.com/advisories/61417
secunia.com/advisories/61469
secunia.com/advisories/61577
secunia.com/advisories/61640
secunia.com/advisories/61846
secunia.com/advisories/62314
security.gentoo.org/glsa/glsa-201502-12.xml
www-01.ibm.com/support/docview.wss?uid=swg21680334
www-01.ibm.com/support/docview.wss?uid=swg21681379
www-01.ibm.com/support/docview.wss?uid=swg21681966
www-01.ibm.com/support/docview.wss?uid=swg21683338
www-01.ibm.com/support/docview.wss?uid=swg21683429
www-01.ibm.com/support/docview.wss?uid=swg21683438
www-01.ibm.com/support/docview.wss?uid=swg21683484
www-01.ibm.com/support/docview.wss?uid=swg21685121
www-01.ibm.com/support/docview.wss?uid=swg21685122
www-01.ibm.com/support/docview.wss?uid=swg21685178
www-01.ibm.com/support/docview.wss?uid=swg21685242
www-01.ibm.com/support/docview.wss?uid=swg21686142
www-01.ibm.com/support/docview.wss?uid=swg21686383
www-01.ibm.com/support/docview.wss?uid=swg21686824
www-01.ibm.com/support/docview.wss?uid=swg21688893
www-01.ibm.com/support/docview.wss?uid=swg21689593
www.debian.org/security/2014/dsa-2980
www.debian.org/security/2014/dsa-2987
www.ibm.com/support/docview.wss?uid=swg21683518
www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
www.securityfocus.com/archive/1/534161/100/0/threaded
www.securityfocus.com/bid/68624
www.securitytracker.com/id/1030577
www.vmware.com/security/advisories/VMSA-2014-0012.html
access.redhat.com/errata/RHSA-2014:0902
access.redhat.com/errata/RHSA-2014:0908
access.redhat.com/security/updates/classification/#critical
exchange.xforce.ibmcloud.com/vulnerabilities/94605
kc.mcafee.com/corporate/index?page=content&id=SB10083
rhn.redhat.com/errata/RHSA-2014-0889.html
www.ibm.com/support/docview.wss?uid=swg21680418
Related
