Cache Attacks in TLS - CVE-2018-12404

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU16219

Cache Attacks in TLS - CVE-2018-12404

Published: December 4, 2018 / Updated: February 11, 2019


Vulnerability identifier: #VU16219
CSH Severity: Medium
CVSS v4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-12404
CWE-ID: CWE-300
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a downgrade attack on the server and decrypt private keys on the target system.

The vulnerability exists due to a core weakness in TLS that relates to the handshaking of the session key which is used within the tunnel during parallelisation of thousands of oracle queries that occurs using a cluster of TLS servers which share the same public key certificate. A remote attacker can mount a microarchitectural side channel attack against a vulnerable implementation, obtain a network man-in-the-middle position, obtain the relevant data to sign and trigger the victim server to decrypt ciphertexts chosen by the adversary to perform a downgrade attack.







Affected software

TLS
Amazon Linux AMI
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Slackware Linux
Opensuse
Fedora
nss (Ubuntu package)
nss (Alpine package)
nss
RUGGEDCOM ROS
Data Computing Appliance (DCA)
EMC Cloud Tiering Appliance
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)
SAN Volume Controller and Storwize Family

How to mitigate CVE-2018-12404

Install update from vendor's website.

nss (Alpine package) - update to 3.41-r0
RUGGEDCOM ROS - update to 2.14.0
nss - addressed in versions 3.40.1-1.0.fc28, 3.40.1-1.0.fc29
Data Computing Appliance (DCA) - update to 4.3.0.0
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.0.0.5.116
Dell EMC Unity Operating Environment (OE) - update to 5.0.0.0.5.116
SAN Volume Controller and Storwize Family - addressed in versions 7.8.1.12, 8.2.1.11, 8.3.0.2, 8.3.1.0
EMC Cloud Tiering Appliance - update to 12.1.0.65

External References

Related Security Bulletins