CWE-385: Covert Timing Channel
Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.
A kind of CWE-514 Covert Channel.
From the CWE List. © The MITRE Corporation.
Newest
- open-quantum-safe liboqs liboqs: Missing value barrier in FO implicit rejection path (FrodoKEM, NTRU, and others) 5.1 Medium
- phpseclib phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery 6.3 Medium
- free5gc free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA 3.7 Low
-
web-token/jwt-libraryPackagist PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle 6.3 Medium - postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 more PostgreSQL discloses MD5-hashed passwords via covert timing channel 6.5 Medium
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +29 more +31 more Non-constant time comparisons risk private key leakage in FrodoKEM. 8.9 High
- No product listed A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as... 4.6 Medium
- arm mbed tls, tf-psa-crypto +1 more In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB... 5.1 Medium
- openclaw OpenClaw < 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script Wrapper 7.0 High
- vllm vLLM vulnerable to timing attack at bearer auth 7.5 High
- openssl, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +16 more +18 more Timing side-channel in SM2 algorithm on 64 bit ARM 5.9 Medium
- ongres scram Timing Attack Vulnerability in SCRAM Authentication 6.6 Medium
- trustedfirmware mbed tls, mbed mbedtls +1 more In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding... 4.0 Medium
- wolfssl Curve25519 Blinding 5.6 Medium
- filebrowser FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout 7.7 High
-
opensslDebian,openssl-3openSUSE +1 more OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack,... 5.3 Medium - davidosipov postquantum-feldman-vss Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations 5.8 Medium
- openssl Timing side-channel in ECDSA signature computation 4.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Ruby: openssl: ruby marvin attack 7.4 High
- devolutions xts.net Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications 5.1 Medium
- matrix olm An issue was discovered in Matrix libolm (aka Olm) through 3.2.16. Cache-timing attacks can occur... 5.3 Medium
- open-quantum-safe liboqs Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options 5.9 Medium
-
pypqcPyPI Observable Timing Discrepancy in pypqc 7.8 High - es iperf3, netapp bootstrap os +1 more iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication,... 5.9 Medium
- ibm common cryptographic architecture IBM Common Cryptographic Architecture information disclosure 3.7 Low
- dell powerscale onefs Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A... 5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 more Libgcrypt: vulnerable to marvin attack 5.9 Medium
- nodejs node, nodejs +1 more Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked... 7.4 High
- m2crypto project m2crypto, red hat enterprise linux 6, enterprise linux 7 +7 more +9 more M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657 7.5 High
- opencryptoki project opencryptoki, red hat enterprise linux 6, enterprise linux 7 +6 more +8 more Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin) 5.9 Medium
- arm mbed tls An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing... 5.5 Medium
- tlsfuzzer ecdsa, python-ecdsa +1 more python-ecdsa vulnerable to Minerva attack on P-256 7.4 High
- gnu gnutls, fedoraproject fedora, red hat enterprise linux 6 +10 more +12 more Gnutls: incomplete fix for cve-2023-5981 7.5 High
- couchbase server, cryptography.io cryptography, red hat ansible automation platform 2 +8 more +10 more Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 7.5 High
- rustcrypto rsa RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels 5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user sp… 7.0 High
- dell bsafe crypto-c micro edition, bsafe micro edition suite, bsafe crypto-c-micro-edition +5 more +7 more Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite,... 5.1 Medium
- dell bsafe crypto-c micro edition, bsafe crypto-c-micro-edition, bsafe micro-edition-suite +4 more +6 more Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, ... 6.7 Medium
- dell bsafe crypto-c micro edition, bsafe crypto-c-micro-edition, bsafe micro-edition-suite +4 more +6 more Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, ... 6.8 Medium
- dell bsafe ssl-j Only customers with active BSAFE maintenance contracts can receive details about this... 5.9 Medium
- m2crypto project m2crypto, fedoraproject fedora, redhat enterprise linux +1 more +3 more A flaw was found in all released versions of m2crypto, where they are vulnerable to... 5.9 Medium
- red hat single sign-on The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can... 2.7 Low
- python-rsa project python-rsa, fedoraproject fedora, redhat openstack platform +2 more Timing attacks in python-rsa 7.5 High
- [unknown] python-cryptography, cryptography.io cryptography, oracle communications cloud native core network function cloud native environment +2 more RSA decryption vulnerable to Bleichenbacher timing vulnerability 5.9 Medium
- linux kernel, [unknown] linux kernel, redhat enterprise linux +2 more A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5... 5.5 Medium
- dell rsa bsafe crypto-c micro edition, emc rsa bsafe crypto-c, dell bsafe crypto-c-micro-edition +2 more +4 more RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1... 5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 more A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM... 5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 more It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen... 5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 more It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen... 5.9 Medium
- apache cxf Covert Timing Channel in Apache CXF 7.5 High
- Show olderLoading…