CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.9. See the original NVD description below for full technical details.
CVE
CVE-2018-12433
Severity
MEDIUM
CVSS
4.9
EPSS
0.35%
Original NVD Description
cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical host. NOTE: the vendor does not include side-channel attacks within its threat model
Related CVEs
Other vulnerabilities affecting the same vendor(s)