CVE-2016-8100: Infoleak
Published Oct 10, 2016
·Updated
Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via a side-channel attack.
Affected Software
1 affected component
Intel Integrated Performance Primitives<=9.0.3
Remediation
Event History
Oct 10, 2016
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-8100?
CVE-2016-8100 is classified as a medium severity vulnerability due to the potential for local users to retrieve RSA private keys.
2
How do I fix CVE-2016-8100?
To fix CVE-2016-8100, you should upgrade Intel Integrated Performance Primitives to version 9.0.4 or later.
3
What types of attacks are associated with CVE-2016-8100?
CVE-2016-8100 is associated with side-channel attacks that can lead to the exposure of RSA private keys.
4
Who is affected by CVE-2016-8100?
Local users of Intel Integrated Performance Primitives versions prior to 9.0.4 are affected by CVE-2016-8100.
5
What is Intel Integrated Performance Primitives in relation to CVE-2016-8100?
Intel Integrated Performance Primitives is a software library where CVE-2016-8100 poses a risk to the security of RSA key management.