CVE Intelligence

Vulnerabilidades do Oracle E-business Suite Technology Stack

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Oracle E-business Suite Technology Stack: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:oracle:e-business_suite_technology_stack

CVE-2018-0734 Média · 5.9 CWE-327 30/10/2018
Timing attack against DSA
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).