Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.
159 vulnerabilities with CWE-208
CVE-2024-1543
MEDIUM
wolfssl < 5.6.6 - Observable Timing Discrepancy in T-Table Implementation
CVSS 4.1
CVE-2024-45191
MEDIUM
Matrix libolm <3.2.16 - Cache Timing Attack
CVSS 5.3
CVE-2024-42368
MEDIUM
opentelemetry-collector-contrib 0.80.0-0.106.0 - Observable Timing Discrepancy in Bearer Token Authentication
CVSS 6.5
CVE-2024-29995
HIGH
Windows Kerberos - Privilege Escalation
CVSS 8.1
CVE-2024-41828
LOW
JetBrains TeamCity <2024.07 - Info Disclosure
CVSS 2.6
CVE-2024-40640
LOW
vodozemac < 0.7.0 - Observable Timing Discrepancy in Base64 Key Import
CVSS 2.9
CVE-2024-39329
MEDIUM
Django <5.0.7, <4.2.14 - Info Disclosure
CVSS 5.3
CVE-2024-36405
MEDIUM
liboqs < 0.10.1 - Covert Timing Channel in Kyber Key Encapsulation Mechanism
CVSS 5.9
CVE-2024-2467
MEDIUM
perl-Crypt-OpenSSL-RSA - Info Disclosure
CVSS 5.9
CVE-2024-3296
MEDIUM
Red Hat Enterprise Linux 8 and 9 - Observable Timing Discrepancy in rust-openssl PKCS#1v1.5 RSA Padding
CVSS 5.9
CVE-2024-24770
MEDIUM
vantage6 < 4.2.2 and >= 4.3.0 - Username Enumeration via Password Recovery and 2FA Lost Token Endpoints
CVSS 5.3
CVE-2024-0202
MEDIUM
cryptlib < 3.4.7 - Timing Attack via RSA Key Exchange Ciphersuites
CVSS 5.9
CVE-2024-21671
LOW
vantage6 < 4.2.0 - Observable Timing Discrepancy in Login Response
CVSS 3.7
CVE-2024-23342
HIGH
ecdsa < 0.18.0 - Covert Timing Channel
CVSS 7.4
CVE-2023-20572
MEDIUM
Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics - Observable Timing Discrepancy
CVE-2023-20540
LOW
Amd Ryzen™ 3000 Series Desktop Processors - Observable Timing Discrepancy
CVE-2023-41313
CRITICAL
Apache Doris <2.0.0 - Info Disclosure
CVSS 9.8
CVE-2023-41097
MEDIUM
Silabs Gecko Software Development Kit < 4.4.0 - Observable Timing Discrepancy in CBC PKCS7 Padding
CVSS 4.6
CVE-2023-5981
MEDIUM
GnuTLS - Timing Side-Channel in RSA-PSK ClientKeyExchange
CVSS 5.9
CVE-2023-25529
HIGH
NVIDIA DGX H100 and A100 BMC < 23.08.18 - Unauthenticated Session Token Leak via Timing Discrepancy
CVSS 8.0
CVE-2023-40182
LOW
Silverware Games <1.3.6 - Info Disclosure
CVSS 3.7
CVE-2023-40021
MEDIUM
Oppia 1.1.0-3.3.2 - Observable Timing Discrepancy in CSRF Token Validation
CVSS 5.3
CVE-2023-32694
MEDIUM
Saleor Core <3.7.67 - Timing Attack
CVSS 4.8
CVE-2023-25000
MEDIUM
HashiCorp Vault <1.13.1-1.12.5-1.11.9 - Info Disclosure
CVSS 5.0
CVE-2023-1538
MEDIUM
answerdev/answer <1.0.6 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities
159