Falhas do tipo CWE-385

41 resultados

Canal de Tempo Encoberto

É quando um atacante consegue extrair informações sensíveis observando o tempo que uma operação leva para completar. O código vaza dados através de diferenças mensuráveis de latência — por exemplo, validar senha caractere por caractere toma mais tempo se o primeiro caractere estiver correto, revelando a senha bit a bit.

Exemplo

Um servidor compara uma senha fornecida com a armazenada usando loop simples: se primeiro caractere falha, para imediatamente; se acerta, continua. Um atacante mede o tempo de resposta e deduz qual caractere está certo observando quando a requisição demora mais — vazando a senha sem nunca vê-la diretamente.

Como mitigar

Use comparação de tempo constante para dados sensíveis (funções tipo `crypto.timingSafeEqual` em Node.js ou equivalentes). Implemente mascaramento de tempo: adicione delays aleatórios ou normalize o tempo de processamento independente do resultado para impedir que diferenças mensuráveis apareçam.

CVE-2018-10845MEDIUMIt was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use thisEPSS 3.6%CVE-2018-10844MEDIUMIt was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use thisEPSS 3.6%CVE-2020-25659—python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 EPSS 2.5%CVE-2025-9231MEDIUMTiming side-channel in SM2 algorithm on 64 bit ARMEPSS 2.2%CVE-2020-25657—A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API EPSS 1.7%CVE-2020-25658HIGHIt was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decEPSS 1.7%CVE-2019-3732MEDIUMRSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition SuiteEPSS 1.4%CVE-2023-46809HIGHNode.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched areEPSS 1.3%CVE-2024-2236MEDIUMLibgcrypt: vulnerable to marvin attackEPSS 1.1%CVE-2022-24409MEDIUMDell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the aEPSS 1.1%CVE-2024-26306MEDIUMiPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption EPSS 1.1%CVE-2020-29506MEDIUMDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable TEPSS 1.1%CVE-2024-23342HIGHpython-ecdsa vulnerable to Minerva attack on P-256EPSS 1.0%CVE-2020-14341—The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connecEPSS 0.9%CVE-2025-59432MEDIUMTiming Attack Vulnerability in SCRAM AuthenticationEPSS 0.9%CVE-2023-3640HIGHKernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user spaceEPSS 0.8%CVE-2020-35164MEDIUMDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable TimEPSS 0.7%CVE-2026-5598HIGHNon-constant time comparisons risk private key leakage in FrodoKEM.EPSS 0.7%CVE-2020-35166MEDIUMDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable TimEPSS 0.7%CVE-2024-25964MEDIUMDell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A remote unauthenticated attacker could potentiEPSS 0.7%