CWE-203: Observable Discrepancy, page 7

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

What the weakness is: CWE-203 at MITRE

1. 7.5CVE-2023-50782EPSS 1.1%2024-02-05

   A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

2. 7.5CVE-2023-50781EPSS 1.1%2024-02-05

   A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

3. 6.5CVE-2023-6240EPSS 1.0%2024-02-04

   A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

4. 9.8CVE-2021-21575EPSS 0.5%2024-02-02

   Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.

5. 5.9CVE-2023-5992EPSS 1.2%2024-01-31

   A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

6. 5.5CVE-2024-23170EPSS 0.3%2024-01-31

   An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the att…

7. 5.9CVE-2024-0914EPSS 0.9%2024-01-31

   A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without acc…

8. 8.1CVE-2023-6258EPSS 0.6%2024-01-30

   A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards (PKCS#11). If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, p…

9. 3.7CVE-2024-21671EPSS 0.4%2024-01-30

   The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). It is possible to find out usernames from the response time of login requests. This could …

10. 6.5CVE-2024-0564EPSS 0.6%2024-01-30

    A flaw was found in the Linux kernel's memory deduplication mechanism. The max page sharing of Kernel Samepage Merging (KSM), added in Linux kernel version 4.4.0-96.119, can create a side channel. When the attacker and the victim share the…

11. 5.3CVE-2024-22647EPSS 0.6%2024-01-30

    An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force …

12. 5.9CVE-2024-23218EPSS 1.0%2024-01-23

    A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, m…

13. 7.4CVE-2024-23342EPSS 1.0%2024-01-23

    The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve D…

14. 5.9CVE-2024-21484EPSS 1.0%2024-01-22

    Versions of the package jsrsasign before 11.0.0 are vulnerable to Observable Discrepancy via the RSA PKCS1.5 or RSAOAEP decryption process. An attacker can decrypt ciphertexts by exploiting the Marvin security flaw. Exploiting this vulnera…

15. 9.8CVE-2024-23771EPSS 1.1%2024-01-22

    darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.

16. 7.5CVE-2024-0553EPSS 1.6%2024-01-16

    A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform…

17. 5.9CVE-2023-52323EPSS 0.6%2024-01-05

    PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

18. 5.9CVE-2023-46739EPSS 0.4%2024-01-03

    CubeFS is an open-source cloud-native file storage system. A vulnerability was found during in the CubeFS master component in versions prior to 3.3.1 that could allow an untrusted attacker to steal user passwords by carrying out a timing a…

19. 9.8CVE-2023-50708EPSS 0.7%2023-12-22

    yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0. In yii2-authclient prior to version 2.2.15, the Oauth1/2 `state` and OpenID Connect `nonce` is vulnerable for a `timing…

20. 7.5CVE-2023-41097EPSS 0.3%2023-12-21

    An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.

21. 4.3CVE-2023-6135EPSS 0.7%2023-12-19

    Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.

22. 4.3CVE-2023-23584EPSS 0.5%2023-12-18

    An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of items that would not otherwise be viewable. This issue affects: Gallagher Command Centre 8.70 pr…

23. 5.9CVE-2023-50979EPSS 0.6%2023-12-18

    Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.

24. 6.5CVE-2023-4421EPSS 0.8%2023-12-12

    The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks. Both the overall correctness of the padding as well as the length of the encrypted message was leaking through timing side-c…

25. 7.5CVE-2023-45287EPSS 1.2%2023-12-05

    Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears …

26. 6.5CVE-2023-40090EPSS 0.5%2023-12-04

    In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to remote escalation of privilege with no additional execution privileges needed. U…

27. 5.9CVE-2023-49092EPSS 0.6%2023-11-28

    RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able t…

28. 5.9CVE-2023-5981EPSS 1.3%2023-11-28

    A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

29. 5.3CVE-2023-47102EPSS 0.6%2023-11-07

    UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.

30. 5.5CVE-2023-21354EPSS 0.09%2023-10-30

    In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional executi…

31. 5.5CVE-2023-21350EPSS 0.09%2023-10-30

    In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution priv…

32. 3.3CVE-2023-21349EPSS 0.09%2023-10-30

    In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privi…

33. 3.3CVE-2023-21348EPSS 0.09%2023-10-30

    In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privil…

34. 3.3CVE-2023-21346EPSS 0.09%2023-10-30

    In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional exec…

35. 3.3CVE-2023-21345EPSS 0.09%2023-10-30

    In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution …

36. 5.5CVE-2023-21344EPSS 0.1%2023-10-30

    In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privile…

37. 5.5CVE-2023-21338EPSS 0.1%2023-10-30

    In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privile…

38. 7.8CVE-2023-21337EPSS 0.1%2023-10-30

    In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileg…

39. 5.5CVE-2023-21336EPSS 0.1%2023-10-30

    In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileg…

40. 5.5CVE-2023-21335EPSS 0.1%2023-10-30

    In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges n…

41. 5.5CVE-2023-21333EPSS 0.1%2023-10-30

    In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privile…

42. 5.5CVE-2023-21332EPSS 0.1%2023-10-30

    In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privile…

43. 5.5CVE-2023-21331EPSS 0.1%2023-10-30

    In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privilege…

44. 5.5CVE-2023-21330EPSS 0.1%2023-10-30

    In Overlay Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privi…

45. 5.5CVE-2023-21327EPSS 0.09%2023-10-30

    In Permission Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution pr…

46. 5.5CVE-2023-21326EPSS 0.09%2023-10-30

    In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional executi…

47. 5.5CVE-2023-21325EPSS 0.09%2023-10-30

    In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges n…

48. 7.8CVE-2023-21324EPSS 0.10%2023-10-30

    In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution pr…

49. 5.5CVE-2023-21323EPSS 0.09%2023-10-30

    In Activity Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution priv…

50. 5.5CVE-2023-21320EPSS 0.09%2023-10-30

    In Device Policy, there is a possible way to verify if a particular admin app is registered on the device due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges n…