Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:39202
HistoryFeb 10, 2023 - 1:05 p.m.

Timing Attack

2023-02-1013:05:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
26
openssl
rsa
vulnerability
recover
ciphertext
bleichenbacher
attack

EPSS

0.002

Percentile

55.2%

JSON

openssl is vulnerable to Timing Attack. The vulnerability exists in rsa/rsa_ossl.c because an attacker can recover ciphertext with a Bleichenbacher style attack by sending a large number of trial messages.

Related

osv 11
cbl_mariner 9
ubuntucve 1
ibm 31
openvas 33
nessus 63
nvd 1
redhatcve 1
cve 1
alpinelinux 1
prion 1
debiancve 1
cvelist 1
github 1
cgr 1
ics 6
f5 1
githubexploit 1
wolfi 1
hackerone 1
openssl 1
rustsec 1
amazon 3
redhat 6
freebsd_advisory 1
oraclelinux 9
almalinux 2
slackware 1
altlinux 2
fedora 2
rocky 1
redos 1
freebsd 1
photon 1
osv
osv
Timing Oracle in RSA Decryption
2023-02-07 12:00:00
openssl-src subject to Timing Oracle in RSA Decryption
2023-02-08 22:31:42
CGA-5m9g-jw9v-2cq5
2024-09-25 05:12:56
cbl_mariner
cbl_mariner
CVE-2022-4304 affecting package cloud-hypervisor for versions less than 30.0-2
2023-04-16 02:55:47
CVE-2022-4304 affecting package hvloader for versions less than 1.0.1-2
2024-06-06 19:53:22
CVE-2022-4304 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
ubuntucve
ubuntucve
CVE-2022-4304
2023-02-07 00:00:00
ibm
ibm
Security Bulletin: IBM Elastic Storage System is affected by a vulnerability in OpenSSL (CVE-2022-4304)
2023-08-24 06:11:51
Security Bulletin: IBM Aspera Faspex 5.0.5 has addressed CVE-2022-4304
2023-04-03 20:05:38
Security Bulletin: IBM Events Operator is affected by an openssl vulnerability
2023-09-25 14:36:07
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2622-1)
2023-06-26 00:00:00
openSUSE: Security Advisory for openssl (SUSE-SU-2023:2633-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2624-1)
2023-06-26 00:00:00
nessus
nessus
SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2023:2622-1)
2023-06-25 00:00:00
SUSE SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2023:2624-1)
2023-06-26 00:00:00
Siemens SIMATIC and SCALANCE Products Encryption Strength (CVE-2022-4304)
2023-12-19 00:00:00
nvd
nvd
CVE-2022-4304
2023-02-08 20:15:23
redhatcve
redhatcve
CVE-2022-4304
2023-02-07 17:27:55
cve
cve
CVE-2022-4304
2023-02-08 20:15:23
alpinelinux
alpinelinux
CVE-2022-4304
2023-02-08 20:15:23
prion
prion
Design/Logic Flaw
2023-02-08 20:15:00
debiancve
debiancve
CVE-2022-4304
2023-02-08 20:15:23
cvelist
cvelist
CVE-2022-4304 Timing Oracle in RSA Decryption
2023-02-08 19:04:28
github
github
openssl-src subject to Timing Oracle in RSA Decryption
2023-02-08 22:31:42
cgr
cgr
CVE-2022-4304 vulnerabilities
2024-05-19 03:07:16
ics
ics
Siemens OpenSSL RSA Decryption in SIMATIC
2023-08-10 12:00:00
Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch (Update A)
2024-06-04 12:00:00
Mitsubishi Electric Factory Automation Products
2024-01-04 12:00:00
f5
f5
K000132943: OpenSSL vulnerability CVE-2022-4304
2023-03-13 00:00:00
githubexploit
githubexploit
Exploit for Observable Discrepancy in Openssl
2023-04-24 07:15:33
wolfi
wolfi
CVE-2022-4304 vulnerabilities
2024-09-28 21:12:41
hackerone
hackerone
Internet Bug Bounty: OpenSSL vulnerable to the Marvin Attack (CVE-2022-4304)
2023-12-02 23:45:28
openssl
openssl
Vulnerability in OpenSSL - Timing Oracle in RSA Decryption
2023-02-07 00:00:00
rustsec
rustsec
Timing Oracle in RSA Decryption
2023-02-07 12:00:00
amazon
amazon
Important: openssl
2023-02-03 19:19:00
Important: openssl
2023-02-03 23:39:00
Important: openssl11
2023-02-03 19:19:00
redhat
redhat
(RHSA-2023:3408) Moderate: openssl security update
2023-05-31 18:25:53
(RHSA-2023:4128) Important: edk2 security update
2023-07-18 07:19:33
(RHSA-2023:3420) Important: Red Hat JBoss Web Server 5.7.3 release and security update
2023-06-05 13:52:35
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:03.openssl
2023-02-16 00:00:00
oraclelinux
oraclelinux
edk2 security update
2023-12-06 00:00:00
edk2 security update
2023-12-06 00:00:00
edk2 security update
2023-12-06 00:00:00
almalinux
almalinux
Important: openssl security update
2023-03-22 00:00:00
Important: edk2 security update
2023-05-16 00:00:00
slackware
slackware
[slackware-security] openssl
2023-02-07 20:57:57
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1
2023-02-10 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1
2023-02-20 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: edk2-20221117gitfff6d81270b5-13.fc37
2023-02-16 02:06:48
[SECURITY] Fedora 36 Update: edk2-20221117gitfff6d81270b5-14.fc36
2023-03-05 00:54:06
rocky
rocky
openssl security update
2023-03-28 13:07:30
redos
redos
ROS-20230418-05
2023-04-18 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities in OpenSSL
2023-02-16 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0530
2023-02-10 00:00:00

EPSS

0.002

Percentile

55.2%

JSON
Related for VERACODE:39202
osv11cbl_mariner9ubuntucve1ibm31openvas33nessus63nvd1redhatcve1cve1alpinelinux1prion1debiancve1cvelist1github1cgr1ics6f51githubexploit1wolfi1hackerone1openssl1rustsec1amazon3redhat6freebsd_advisory1oraclelinux9almalinux2slackware1altlinux2fedora2rocky1redos1freebsd1photon1