Falhas do tipo CWE-385

43 resultados

Canal de Tempo Encoberto

É quando um atacante consegue extrair informações sensíveis observando o tempo que uma operação leva para completar. O código vaza dados através de diferenças mensuráveis de latência — por exemplo, validar senha caractere por caractere toma mais tempo se o primeiro caractere estiver correto, revelando a senha bit a bit.

Exemplo

Um servidor compara uma senha fornecida com a armazenada usando loop simples: se primeiro caractere falha, para imediatamente; se acerta, continua. Um atacante mede o tempo de resposta e deduz qual caractere está certo observando quando a requisição demora mais — vazando a senha sem nunca vê-la diretamente.

Como mitigar

Use comparação de tempo constante para dados sensíveis (funções tipo `crypto.timingSafeEqual` em Node.js ou equivalentes). Implemente mascaramento de tempo: adicione delays aleatórios ou normalize o tempo de processamento independente do resultado para impedir que diferenças mensuráveis apareçam.

CVE-2017-2624MEDIUMIt was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. EPSS 0.7%CVE-2025-0306HIGHRuby: openssl: ruby marvin attackEPSS 0.6%CVE-2024-13176MEDIUMTiming side-channel in ECDSA signature computationEPSS 0.6%CVE-2023-49092MEDIUMRustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannelsEPSS 0.6%CVE-2016-7056MEDIUMA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 privaEPSS 0.6%CVE-2025-59425HIGHvLLM vulnerable to timing attack at bearer authEPSS 0.6%CVE-2026-6478MEDIUMPostgreSQL discloses MD5-hashed passwords via covert timing channelEPSS 0.6%CVE-2024-45192MEDIUMAn issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keyEPSS 0.5%CVE-2024-36405MEDIUMControl-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other optionsEPSS 0.5%CVE-2025-53826HIGHFileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after LogoutEPSS 0.5%CVE-2019-19338MEDIUMA flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculativEPSS 0.5%CVE-2023-33855LOWIBM Common Cryptographic Architecture information disclosureEPSS 0.5%CVE-2025-27587MEDIUMOpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of rEPSS 0.4%CVE-2025-49087MEDIUMIn Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plainteEPSS 0.4%CVE-2018-10846MEDIUMA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker coulEPSS 0.4%CVE-2024-23170MEDIUMAn issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This EPSS 0.3%CVE-2026-55785LOWfree5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKAEPSS 0.3%CVE-2025-66442MEDIUMIn Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's seleEPSS 0.3%CVE-2025-69893MEDIUMA side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, TrezoEPSS 0.2%CVE-2025-29780MEDIUMPost-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix OperationsEPSS 0.2%