CVE-2018-16869

MEDIUM

nettle < 3.4 - Observable Discrepancy via RSA PKCS#1 v1.5 Padding Oracle

Title source: llm

Description

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

References (3)

Core 3

Core References

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/106092

Technical Description, Third Party Advisory x_refsource_misc

http://cat.eyalro.net/

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16869

Scores

CVSS v3 5.7

EPSS 0.0149

EPSS Percentile 70.8%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

Details

CWE

CWE-203

Status published

Products (1)

nettle_project/nettle < 3.4

Published Dec 03, 2018

Tracked Since Feb 18, 2026