Vulnerabilidades do Oracle Tuxedo
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Tuxedo: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:tuxedo
CVE-2018-5407
Média · 4.7
Exploit público CWE-203 15/11/2018
Observable Discrepancy em Canonical Ubuntu Linux
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
CVE-2018-0734
Média · 5.9
CWE-327 30/10/2018
Timing attack against DSA
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
CVE-2018-0735
Média · 5.9
CWE-327 29/10/2018
Timing attack against ECDSA signature generation
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).