cryptopp: information disclosure
| Package(s): | cryptopp | CVE #(s): | CVE-2016-3995 | ||||||||
| Created: | April 15, 2016 | Updated: | April 25, 2016 | ||||||||
| Description: | From the cryptopp bug report:
For both Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock there is some code to avoid timing attacks [...] This counter measure seems to be removed by the compiler. Hence, the binary may be vulnerable to timing attacks. | ||||||||||
| Alerts: |
| ||||||||||