TYPE DE FAIBLESSE

CWE-385

31 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-385 (en anglais) →

CVE-2026-84308Les applications PHP utilisant la bibliothèque phpseclib sont concernées si elles utilisent des clés privées X25519 à longue durée de vie et ne disposent pas de l'extension `ext-so… 6.3 MOYENNE

CVE-2026-6478Les serveurs PostgreSQL utilisant des mots de passe hachés en MD5 (méthode héritée) sont vulnérables à une attaque temporelle permettant de révéler les identifiants des utilisateur… 6.5 MOYENNE

CVE-2025-69893Les portefeuilles matériels Trezor One, Trezor T et Trezor Safe (versions 1.13.0 à 1.14.0) sont sensibles à une attaque par canal auxiliaire lors de la phase de configuration initi… 4.6 MOYENNE

CVE-2025-66442Les systèmes utilisant Mbed TLS (jusqu'à la version 4.0.0) ou TF-PSA-Crypto (jusqu'à la version 1.0.0) compilés avec la fonctionnalité select-optimize de LLVM sont susceptibles d'ê… 5.1 MOYENNE

CVE-2025-9231Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact su… 6.5 MOYENNE

CVE-2025-59432SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. Prior to ve… 6.6 MOYENNE

CVE-2025-49087In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used. 4.0 MOYENNE

CVE-2025-7396In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve2… 5.6 MOYENNE

CVE-2025-27587OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign … 5.3 MOYENNE

CVE-2025-29780Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing (VSS) scheme. In versions 0.8.0b2 and prior, the `fe… 5.8 MOYENNE

CVE-2024-13176Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in E… 4.1 MOYENNE

CVE-2024-11862Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks 5.1 MOYENNE

CVE-2024-45192An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementat… 5.3 MOYENNE

CVE-2024-36405liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference … 5.9 MOYENNE

CVE-2024-26306iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be s… 5.9 MOYENNE

CVE-2024-25964Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading… 5.3 MOYENNE

CVE-2024-2236A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to th… 5.9 MOYENNE

CVE-2024-23170An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a l… 5.5 MOYENNE

CVE-2023-49092RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information whic… 5.9 MOYENNE

CVE-2020-35166Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability. 5.1 MOYENNE

CVE-2020-35164Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability. 6.7 MOYENNE

CVE-2020-29506Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability. 6.8 MOYENNE

CVE-2022-24409Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with acti… 5.9 MOYENNE

CVE-2020-25657A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1… 5.9 MOYENNE

CVE-2020-25659python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext. 5.9 MOYENNE

CVE-2019-19338A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX A… 5.5 MOYENNE

CVE-2016-7056A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys. 5.5 MOYENNE

CVE-2018-10846A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of "Just in Time" Pr… 5.6 MOYENNE

CVE-2018-10845It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks … 5.9 MOYENNE

CVE-2018-10844It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks … 5.9 MOYENNE

CVE-2017-2624It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed … 5.9 MOYENNE