Vulnerability in Gaisler Leon3 Soc
CVE-2010-0928
OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack."
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.005 (42.0th percentile) — read the EPSS interpretation.
Affected products
- Gaisler Leon3_soc
- Openssl — versions 0.9.8i
- Xilinx Virtex-ii_pro_fpga
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2010-0928?
- CVE-2010-0928 is a vulnerability in Gaisler Leon3 Soc, classified under Cryptographic Issues. Published 2010-03-05.
- Is CVE-2010-0928 known to be exploited?
- 15 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.