Vulnerability in Openssl

CVE-2005-1797

The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations.

EPSS: 0.007 (50.9th percentile) — read the EPSS interpretation.

Affected products

  • Openssl — versions 0.9.1c, 0.9.2b, 0.9.3
  • N/a — versions n/a

References