CVE-2014-0076: Low severity OpenSSL OpenSSL vulnerability

Q: What is the severity of CVE-2014-0076?

CVE-2014-0076 is considered a high severity vulnerability due to its potential for exposing ECDSA nonces through a cache side-channel attack.

Q: How do I fix CVE-2014-0076?

To fix CVE-2014-0076, you should upgrade to a version of OpenSSL that is newer than 1.0.0l or apply relevant patches provided by OpenSSL.

Q: What is the impact of CVE-2014-0076?

The impact of CVE-2014-0076 allows local users to potentially retrieve private keys via a cache side-channel attack during ECDSA operations.

Q: Which versions of OpenSSL are affected by CVE-2014-0076?

CVE-2014-0076 affects OpenSSL versions up to and including 1.0.0l and several earlier versions, including 0.9.x releases.

Q: Is CVE-2014-0076 a remote vulnerability?

No, CVE-2014-0076 is not a remote vulnerability; it requires local access to exploit the side-channel information.

Published Mar 25, 2014

Updated

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.

Affected Software

96 affected components

OpenSSL OpenSSL<=1.0.0l

OpenSSL OpenSSL=0.9.1c

OpenSSL OpenSSL=0.9.2b

OpenSSL OpenSSL=0.9.3

OpenSSL OpenSSL=0.9.3a

OpenSSL OpenSSL=0.9.4

OpenSSL OpenSSL=0.9.5

OpenSSL OpenSSL=0.9.5-beta1

OpenSSL OpenSSL=0.9.5-beta2

OpenSSL OpenSSL=0.9.5a

OpenSSL OpenSSL=0.9.5a-beta1

OpenSSL OpenSSL=0.9.5a-beta2

OpenSSL OpenSSL=0.9.6

OpenSSL OpenSSL=0.9.6-beta1

OpenSSL OpenSSL=0.9.6-beta2

OpenSSL OpenSSL=0.9.6-beta3

OpenSSL OpenSSL=0.9.6a

OpenSSL OpenSSL=0.9.6a-beta1

OpenSSL OpenSSL=0.9.6a-beta2

OpenSSL OpenSSL=0.9.6a-beta3

OpenSSL OpenSSL=0.9.6b

OpenSSL OpenSSL=0.9.6c

OpenSSL OpenSSL=0.9.6d

OpenSSL OpenSSL=0.9.6e

OpenSSL OpenSSL=0.9.6f

OpenSSL OpenSSL=0.9.6g

OpenSSL OpenSSL=0.9.6h

OpenSSL OpenSSL=0.9.6i

OpenSSL OpenSSL=0.9.6j

OpenSSL OpenSSL=0.9.6k

OpenSSL OpenSSL=0.9.6l

OpenSSL OpenSSL=0.9.6m

OpenSSL OpenSSL=0.9.7

OpenSSL OpenSSL=0.9.7-beta1

OpenSSL OpenSSL=0.9.7-beta2

OpenSSL OpenSSL=0.9.7-beta3

OpenSSL OpenSSL=0.9.7-beta4

OpenSSL OpenSSL=0.9.7-beta5

OpenSSL OpenSSL=0.9.7-beta6

OpenSSL OpenSSL=0.9.7a

OpenSSL OpenSSL=0.9.7b

OpenSSL OpenSSL=0.9.7c

OpenSSL OpenSSL=0.9.7d

OpenSSL OpenSSL=0.9.7e

OpenSSL OpenSSL=0.9.7f

OpenSSL OpenSSL=0.9.7g

OpenSSL OpenSSL=0.9.7h

OpenSSL OpenSSL=0.9.7i

OpenSSL OpenSSL=0.9.7j

OpenSSL OpenSSL=0.9.7k

OpenSSL OpenSSL=0.9.7l

OpenSSL OpenSSL=0.9.7m

OpenSSL OpenSSL=0.9.8

OpenSSL OpenSSL=0.9.8a

OpenSSL OpenSSL=0.9.8b

OpenSSL OpenSSL=0.9.8c

OpenSSL OpenSSL=0.9.8d

OpenSSL OpenSSL=0.9.8e

OpenSSL OpenSSL=0.9.8f

OpenSSL OpenSSL=0.9.8g

OpenSSL OpenSSL=0.9.8h

OpenSSL OpenSSL=0.9.8i

OpenSSL OpenSSL=0.9.8j

OpenSSL OpenSSL=0.9.8k

OpenSSL OpenSSL=0.9.8l

OpenSSL OpenSSL=0.9.8m

OpenSSL OpenSSL=0.9.8m-beta1

OpenSSL OpenSSL=0.9.8n

OpenSSL OpenSSL=0.9.8o

OpenSSL OpenSSL=0.9.8p

OpenSSL OpenSSL=0.9.8q

OpenSSL OpenSSL=0.9.8r

OpenSSL OpenSSL=0.9.8s

OpenSSL OpenSSL=0.9.8t

OpenSSL OpenSSL=0.9.8u

OpenSSL OpenSSL=0.9.8v

OpenSSL OpenSSL=0.9.8w

OpenSSL OpenSSL=0.9.8x

OpenSSL OpenSSL=0.9.8y

OpenSSL OpenSSL=1.0.0

OpenSSL OpenSSL=1.0.0-beta1

OpenSSL OpenSSL=1.0.0-beta2

OpenSSL OpenSSL=1.0.0-beta3

OpenSSL OpenSSL=1.0.0-beta4

OpenSSL OpenSSL=1.0.0-beta5

OpenSSL OpenSSL=1.0.0a

OpenSSL OpenSSL=1.0.0b

OpenSSL OpenSSL=1.0.0c

OpenSSL OpenSSL=1.0.0d

OpenSSL OpenSSL=1.0.0e

OpenSSL OpenSSL=1.0.0f

OpenSSL OpenSSL=1.0.0g

OpenSSL OpenSSL=1.0.0h

OpenSSL OpenSSL=1.0.0i

OpenSSL OpenSSL=1.0.0j

OpenSSL OpenSSL=1.0.0k

Event History

Mar 25, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·01:25 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0076?

CVE-2014-0076 is considered a high severity vulnerability due to its potential for exposing ECDSA nonces through a cache side-channel attack.

How do I fix CVE-2014-0076?

To fix CVE-2014-0076, you should upgrade to a version of OpenSSL that is newer than 1.0.0l or apply relevant patches provided by OpenSSL.

What is the impact of CVE-2014-0076?