CVE-2016-2178

moderate-risk
Published 2016-06-20

The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.

Do I need to act?

-
0.22% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (20)

Affected Vendors

Openssl Suse Nodejs Oracle Debian Canonical

References (138)

Technical Description http://eprint.iacr.org/2016/594.pdf
Third Party Advisory http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html
Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-1940.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2957.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-1659.html
Mailing List http://seclists.org/fulldisclosure/2017/Jul/31
Third Party Advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20...
and 118 more references
43
/ 100
moderate-risk
Severity 18/34 · Moderate
Exploitability 1/34 · Minimal
Exposure 24/34 · High