cve/2018/CVE-2018-12404.md

CVE-2018-12404

Description

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.

POC

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404
• https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Github

• https://github.com/ARPSyndicate/cvemon