Covert Timing Channel Vulnerability in RSA BSAFE Micro Edition Suite by Oracle

CVE-2018-11057

What is CVE-2018-11057?

The RSA BSAFE Micro Edition Suite prior to versions 4.0.11 and 4.1.6.1 is susceptible to a covert timing channel vulnerability during the RSA decryption process. This flaw, which is linked to the Bleichenbacher attack methodology, allows a remote attacker to exploit timing discrepancies in RSA operations, potentially leading to the recovery of sensitive RSA keys. Addressing this vulnerability is crucial for maintaining the integrity and security of cryptographic operations.

References