CVE-2019-14318
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This...
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
- Record
CVE-2019-14318- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-417
- Updated
- 2026-11-02
CVE List No score
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
- Record
CVE-2019-14318- Updated
- 2026-11-02
EUVDEUVD-2019-5542 No score
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
- Record
EUVD-2019-5542- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j77v-9g36-cfp2
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This...
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
- Record
GHSA-j77v-9g36-cfp2- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSV
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
- Record
CVE-2019-14318- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-14318
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
- Record
DEBIAN-CVE-2019-14318- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2019-14318
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
- Record
UBUNTU-CVE-2019-14318- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2019-0362 No score
Updated libcryptopp packages fix security vulnerability
The updated packages fix a security vulnerability:
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information (CVE-2019-14318).
- Record
MGASA-2019-0362- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1968-1 No score
Security update for libcryptopp
This update for libcryptopp fixes the following issues:
- CVE-2019-14318: Fixed a timing side channel vulnerability in the ECDSA signature generation (boo#1143532).
- Record
openSUSE-SU-2019:1968-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10933-1 No score
libcryptopp-devel-8.6.0-1.1 on GA media
These are all security issues fixed in the libcryptopp-devel-8.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10933-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libcrypto++Debian:12 |
before 5.6.4-9 | 5.6.4-9 |
libcrypto++Debian:13 |
before 5.6.4-9 | 5.6.4-9 |
libcrypto++Debian:14 |
before 5.6.4-9 | 5.6.4-9 |
libcryptoppMageia:7 |
before 7.0.0-1.1.mga7 | 7.0.0-1.1.mga7 |
libcrypto++Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 5.6.1-65.6.1-6+deb8u1build0.14.04.15.6.1-6+deb8u3build0.14.04.15.6.1-6+deb8u3ubuntu0.1~esm1 |
None known |
libcrypto++Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 5.6.1-85.6.1-95.6.1-9ubuntu0.15.6.1-9ubuntu0.1+esm1 |
None known |
libcrypto++Ubuntu:18.04:LTS |
All versions, plus listed versions 5.6.4-8 |
None known |
libcryptoppSUSE:Package Hub 15 |
before 5.6.5-bp151.4.3.1 | 5.6.5-bp151.4.3.1 |
libcryptoppSUSE:Package Hub 15 SP1 |
before 5.6.5-bp151.4.3.1 | 5.6.5-bp151.4.3.1 |
libcryptoppopenSUSE:Leap 15.0 |
before 5.6.5-bp151.4.3.1 | 5.6.5-bp151.4.3.1 |
libcryptoppopenSUSE:Leap 15.1 |
before 5.6.5-bp151.4.3.1 | 5.6.5-bp151.4.3.1 |
libcryptoppopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 8.6.0-1.1 | 8.6.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-14318 is a medium vulnerability (CVSS 5.9) in Cryptopp Crypto\+\+, published July 30, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.10%, the 87th percentile. Fixed in libcrypto++ 5.6.4-9.
References
eprint.iacr.org/2011/232.pdf
tches.iacr.org/index.php/TCHES/article/view/7337
github.com/weidai11/cryptopp/issues/869
lists.opensuse.org/opensuse-security-announce/2019-08/msg00066.html
openwall.com/lists/oss-security/2019/10/02/2
minerva.crocs.fi.muni.cz
Show 12 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-14318
security-tracker.debian.org/tracker/CVE-2019-14318
advisories.mageia.org/MGASA-2019-0362.html
bugs.mageia.org/show_bug.cgi?id=25759
ubuntu.com/security/CVE-2019-14318
cve.org/CVERecord?id=CVE-2019-14318
bugzilla.suse.com/1143532
suse.com/security/cve/CVE-2019-14318