CVE-2014-0076

Source
https://nvd.nist.gov/vuln/detail/CVE-2014-0076
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-0076.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2014-0076
Downstream
Related
Published
2014-03-25T13:25:21Z
Modified
2025-08-09T19:01:27Z
Summary
[none]
Details

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.

References

Affected packages