title: Cryptlib: rsa key exchange ciphersuites in tls vulnerable to marvin attack
description: A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the support for RSA key exchange ciphersuites in TLS (by setting the USE_RSA_SUITES define), it will be vulnerable to the timing variant of the Bleichenbacher attack. An attacker that is able to perform a large number of connections to the server will be able to decrypt RSA ciphertexts or forge signatures using server's certificate.
problem types: Observable Timing Discrepancy
affected:
{
product: cryptlib
vendor: n/a
versions:
version: 3.4.7, status: unaffected
}
{
product: Extra Packages for Enterprise Linux
vendor: Fedora
collectionURL: https://packages.fedoraproject.org/
packageName: cryptlib
defaultStatus: unaffected
}
{
product: Fedora
vendor: Fedora
collectionURL: https://packages.fedoraproject.org/
packageName: cryptlib
defaultStatus: unaffected
}
metrics:
other: [
content: {'value': 'Moderate', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]