PT-2016-7463 · Intel · Intel Integrated Performance Primitives (Ipp) Cryptography

Published 2016-10-10 · Updated 2016-12-02 · CVE-2016-8100

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Integrated Performance Primitives (aka IPP) Cryptography versions prior to 9.0.4

Description The issue makes it easier for local users to discover RSA private keys via a side-channel attack.

Recommendations For versions prior to 9.0.4, update to version 9.0.4 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-8100

Affected Products

Intel Integrated Performance Primitives (Ipp) Cryptography

References · 4

• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00060&languageid=en-fr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8100 · Security Note
• https://osv.dev/vulnerability/CVE-2016-8100 · Vendor Advisory
• http://securityfocus.com/bid/93484 · Note