CVE-2016-7056

2.1

LOWCVSS v2

Published

September 10, 2018

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.

GitHubGeneral purpose TLS and crypto library

<= 1.0.1uNVD

GitHubProvides SSL, TLS and general purpose cryptography.

<= 1.0.1uNVD

NPM

Nodejs openssl wrapper

<= 1.0.1uNVD

Crates.ioOpenSSL bindings

<= 1.0.1uNVD

RubyGemsOpenSSL for Ruby provides access to SSL/TLS and general-purpose cryptography based on the OpenSSL library.

<= 1.0.1uNVD