PT-2016-7463 · Intel · Intel Integrated Performance Primitives (Ipp) Cryptography

Publicado 2016-10-10 · Atualizado 2016-12-02 · CVE-2016-8100

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Integrated Performance Primitives (aka IPP) Cryptography versions prior to 9.0.4

Description The issue makes it easier for local users to discover RSA private keys via a side-channel attack.

Recommendations For versions prior to 9.0.4, update to version 9.0.4 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-8100

Produtos afetados

Intel Integrated Performance Primitives (Ipp) Cryptography

Referências · 4

• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00060&languageid=en-fr · Aviso do Fabricante
• http://securityfocus.com/bid/93484 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8100 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-8100 · Aviso do Fabricante