CVE-2014-0076 Information disclosure in n/a

Low 1.9 Published 25 Mar 2014 Updated 6 Aug 2024

Local attackers can exploit cache side-channels in OpenSSL to recover ECDSA nonces, potentially compromising cryptographic keys.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2014-0076?

CVE-2014-0076 is a low-severity vulnerability in Openssl Openssl, published on 25 Mar 2014. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.

Weakness: CWE-310

Which versions are affected by CVE-2014-0076?

It affects 1 product.

Products include Openssl Openssl.

How do I fix CVE-2014-0076?

Upgrade to a fixed version.

Is CVE-2014-0076 being exploited?

There is no known exploitation of CVE-2014-0076 in the wild and no public exploit code.

All Openssl Openssl vulnerabilities

Sources

Also known as DEBIAN-CVE-2014-0076, GHSA-h7hf-9wc6-h849.