CVE-2016-7440

Description

The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.08

Associated Vulnerability

Vulnerability	OS Platform
Update MariaDB to 10.0.28	Windows
Update MariaDB to 10.1.19	Windows
Update MariaDB to 5.5.53	Windows
Multiple vulnerabilities affected in Mysql 5.6.21	Windows
Multiple vulnerabilities affected in Mysql 5.6.22	Windows
Multiple vulnerabilities affected in Mysql 5.6.23	Windows
Multiple vulnerabilities affected in Mysql 5.6.24	Windows
Multiple vulnerabilities affected in Mysql 5.6.25	Windows
Multiple vulnerabilities affected in Mysql 5.6.26	Windows
Multiple vulnerabilities affected in Mysql 5.6.35	Windows
Multiple vulnerabilities affected in Mysql 5.6.9	Windows
Vulnerabilities CVE-2016-5584,CVE-2016-6662,CVE-2016-7440 are affected in Mysql earlier	Windows
Vulnerabilities CVE-2016-5584,CVE-2016-6304,CVE-2016-6662,CVE-2016-7440 are affected in Mysql earlier	Windows
Update MariaDB to 10.0.28 (For Linux)	Linux
Update MariaDB to 10.1.19 (For Linux)	Linux
Update MariaDB to 5.5.53 (For Linux)	Linux
Multiple vulnerabilities affected in Mysql 5.6.21 (For Linux)	Linux
Multiple vulnerabilities affected in Mysql 5.6.22 (For Linux)	Linux
Multiple vulnerabilities affected in Mysql 5.6.23 (For Linux)	Linux
Multiple vulnerabilities affected in Mysql 5.6.24 (For Linux)	Linux
Multiple vulnerabilities affected in Mysql 5.6.25 (For Linux)	Linux
Multiple vulnerabilities affected in Mysql 5.6.26 (For Linux)	Linux
Multiple vulnerabilities affected in Mysql 5.6.35 (For Linux)	Linux
Multiple vulnerabilities affected in Mysql 5.6.9 (For Linux)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234