漏洞标题
N/A
漏洞描述信息
在 OpenSSL 1.0.2m 和 1.1.0g 之前，x86_64 Montgomery 平方操作中存在传播误差。该缺陷没有影响 EC 算法。分析表明，由于该缺陷，对 RSA 和 DSA 的攻击将非常困难，并且被认为是不太可能的。对 DH 的攻击被认为是可行的(尽管非常困难)，因为大多数有关私钥的信息可能需要在离线方式进行。攻击所需的资源数量非常庞大，很可能只对有限的攻击者可用。攻击者还需要在具有持久 DH 参数和多个客户端共享私钥的情况下，在线访问一个未更新的系统。这仅影响支持 BMI1、BMI2 和 ADX 扩展的处理器，如英特尔 Broadwell(5 代)及其后续产品或 AMD Ryzen。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
OpenSSL 信息泄露漏洞
漏洞描述信息
OpenSSL是Openssl团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。 OpenSSL 1.0.2m之前的版本和1.1.0g之前的1.1.0版本中存在信息泄露漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。
CVSS信息
N/A
漏洞类别
信息泄露