Fallos del tipo CWE-385

43 resultados

Canal encoberto de temporização

É uma vulnerabilidade que permite a um atacante extrair informações sensíveis observando o tempo que um sistema leva para executar operações. Quando um programa processa dados confidenciais (como senhas ou chaves criptográficas) e seu tempo de execução varia dependendo do valor dos dados, um observador externo pode deduzir informações apenas medindo esses intervalos.

Ejemplo

Um algoritmo de validação de senha que compara caractere por caractere pode vazar a posição exata do primeiro caractere errado: se a resposta vem em 10ms quando o primeiro caractere falha e em 50ms quando falha no quinto caractere, um atacante pode adivinhar a senha caractere por caractere medindo tempos de resposta.

Cómo mitigar

Use operações de tempo constante para comparações críticas (constant-time comparison), implemente delays aleatórios, ou normalize o tempo de resposta independentemente do resultado. Em criptografia, aplique algoritmos resistentes a ataques de temporização ou use bibliotecas auditadas que já fazem isso.

CVE-2017-2624MEDIUMIt was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. EPSS 0.7%CVE-2025-0306HIGHRuby: openssl: ruby marvin attackEPSS 0.6%CVE-2024-13176MEDIUMTiming side-channel in ECDSA signature computationEPSS 0.6%CVE-2023-49092MEDIUMRustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannelsEPSS 0.6%CVE-2016-7056MEDIUMA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 privaEPSS 0.6%CVE-2025-59425HIGHvLLM vulnerable to timing attack at bearer authEPSS 0.6%CVE-2026-6478MEDIUMPostgreSQL discloses MD5-hashed passwords via covert timing channelEPSS 0.6%CVE-2024-45192MEDIUMAn issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keyEPSS 0.5%CVE-2024-36405MEDIUMControl-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other optionsEPSS 0.5%CVE-2025-53826HIGHFileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after LogoutEPSS 0.5%CVE-2019-19338MEDIUMA flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculativEPSS 0.5%CVE-2023-33855LOWIBM Common Cryptographic Architecture information disclosureEPSS 0.5%CVE-2025-27587MEDIUMOpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of rEPSS 0.4%CVE-2025-49087MEDIUMIn Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plainteEPSS 0.4%CVE-2018-10846MEDIUMA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker coulEPSS 0.4%CVE-2024-23170MEDIUMAn issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This EPSS 0.3%CVE-2026-55785LOWfree5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKAEPSS 0.3%CVE-2025-66442MEDIUMIn Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's seleEPSS 0.3%CVE-2025-69893MEDIUMA side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, TrezoEPSS 0.2%CVE-2025-29780MEDIUMPost-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix OperationsEPSS 0.2%