CVE-2018-0495
libgcrypt20: Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can...
CVE-2018-0495 is fixed in 7 products on 1 platform, first by libgcrypt20 1.8.1-4ubuntu1.1, released June 12, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0087
58th percentile
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libgcrypt20 · Ubuntu 18.04.6 LTS (bionic) | 1.8.1-4ubuntu1.1 | libgcrypt20 1.8.1-4ubuntu1.1 | Jun 12, 2018 |
| libnss3 · Ubuntu 18.04.6 LTS (bionic) | 2:3.35-2ubuntu2.1 | libnss3 2:3.35-2ubuntu2.1 | Dec 11, 2018 |
| libnss3-tools · Ubuntu 18.04.6 LTS (bionic) | 2:3.35-2ubuntu2.1 | libnss3-tools 2:3.35-2ubuntu2.1 | Dec 11, 2018 |
| libssl1.0.0 · Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.1 | libssl1.0.0 1.0.2n-1ubuntu5.1 | Jun 12, 2018 |
| libssl1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.0g-2ubuntu4.1 | libssl1.1 1.1.0g-2ubuntu4.1 | Jun 12, 2018 |
| openssl · Ubuntu 18.04.6 LTS (bionic) | 1.1.0g-2ubuntu4.1 | openssl 1.1.0g-2ubuntu4.1 | Jun 12, 2018 |
| openssl1.0 · Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.1 | openssl1.0 1.0.2n-1ubuntu5.1 | Jun 12, 2018 |