p PatchFirst

PatchFirst · Latest vulnerabilities

libtomcrypt vulnerabilities

Vulnerabilities published for libtomcrypt in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 1

  1. CVE-2018-12437

    Medium · CVSS 4.9EPSS 0.54%Fix available

    CVE-2018-12437

    LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

    libtomcryptOperating systems
    • Update to 1.18.1-1ubuntu0.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →