CoreCVE
Back

HIGH

In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions

Published Nov 18, 2019

Description

In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication is possible on an elliptic curve which might allow practical recovery of the long-term private key.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-203

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner snyk
Published Nov 18, 2019
Updated Aug 4, 2024
Reserved Apr 3, 2019
Link CVE-2019-10764
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-10764
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-10764
ENISA EUVD
Assigner snyk
Published Nov 18, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-0757
EUVD-2019-0757 GHSA-MR6R-82X4-F4JJ