Memory-cache side-channel attack in Libgcrypt - CVE-2018-0495

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU13370

Memory-cache side-channel attack in Libgcrypt - CVE-2018-0495

Published: June 16, 2018 / Updated: April 7, 2020


Vulnerability identifier: #VU13370
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-0495
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists due to a leakage of information through memory caches when the affected library uses a private key to create Elliptic Curve Digital Signature Algorithm (ECDSA) signatures.  A local attacker can conduct a memory-cache side-channel attack on ECDSA signatures and recover sensitive information, such as ECDSA private keys, which could be used to conduct further attacks. 

Note: The vulnerability is known as the "Return Of the Hidden Number Problem" or ROHNP.


Affected software

Libgcrypt
Arch Linux
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for Power
Slackware Linux
Opensuse
Fedora
libgcrypt (Alpine package)
libressl (Alpine package)
nss-softokn (Red Hat package)
nss (Ubuntu package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
openssl
libgcrypt
botan2
Data Computing Appliance (DCA)
EMC Cloud Tiering Appliance
Dell EMC Unity Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)

How to mitigate CVE-2018-0495

Update to version 1.7.10, 1.8.3.

Libgcrypt - addressed in versions 1.7.10, 1.8.3
libgcrypt (Alpine package) - update to 1.7.10-r0
libressl (Alpine package) - update to 2.6.5-r0
nss-softokn (Red Hat package) - addressed in versions 3.28.3-9.el7_4, 3.36.0-6.el7_5, 3.36.0-6.el7_6
openssl - update to 1.1.1a-1.fc29
libgcrypt - addressed in versions 1.8.3-1.fc27, 1.8.3-1.fc28
botan2 - addressed in versions 2.7.0-1.fc27, 2.7.0-1.fc28
Data Computing Appliance (DCA) - update to 4.3.0.0
Dell EMC Unity Operating Environment (OE) - update to 5.0.0.0.5.116
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.0.0.5.116
EMC Cloud Tiering Appliance - update to 12.1.0.65

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins