VDB

GCVE-110-CERTCC-2003-997481

GCVE-110-CERTCC-2003-997481
Advisory Published
Vulnetix · Advisory published March 14, 2003
Cryptographic libraries and applications do not provide adequate defense against a side-channel timing attack against RSA private keys. Such an attack has been shown to be practical using currently available hardware on systems and networks with sufficiently low variance in latency.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact15population15exploitation0widely_known16score_current9.41625ease_of_exploitation9

Aliases

CVE-2003-0147

Transitive aliases

GHSA-8v5p-2cpv-c2x61009458DSA-136-1VAR-200312-0218RHSA-2002:103GHSA-2x68-h5x4-c4qpRHSA-2002:193EUVD-2003-0539EUVD-2002-0831EUVD-2002-0974RHSA-2004:139RHSA-2003:093RHSA-2002:118RHSA-2002:150EUVD-2002-0832GHSA-h5gj-xw8w-hmjfDSA-136EUVD-2003-0020EUVD-2002-0651BDU:2015-04063RHSA-2002:243CVE-2001-1246BDU:2015-08206CVE-2002-0392RHSA-2002:161EUVD-2002-1360GHSA-6r62-6x7v-wrm2DSA-195RHSA-2002:244CNVD-2004-0791VAR-200411-0173GHSA-qqh8-wx7x-qgh9RHSA-2003:243DSA-465GHSA-ph6p-3j2f-xq2gGHSA-42vq-2xjj-6g8wRHSA-2002:15515505CVE-2003-0542GHSA-fhww-cg6g-p27cCERTCC-2002-240329EUVD-2001-0131GHSA-39rv-383r-32wpRHSA-2003:159VAR-200303-0010CVE-2004-0112GSD-2002-0659RHSA-2002:160DSA-135EUVD-2003-0248GSD-2002-0839GHSA-4352-7f73-983cRHSA-2002:288EUVD-2003-0536CERTCC-2003-380864DEBIAN-CVE-2003-0544RHSA-2003:405CVE-2003-0253EUVD-2002-1359EUVD-2003-0249CERTCC-2004-465542VAR-200208-0243CVE-2002-1568GHSA-4wcr-f6x9-g539DEBIAN-CVE-2004-0112DEBIAN-CVE-2003-0545RHSA-2003:360GHSA-6rjg-j93g-96ppBDU:2015-08204RHSA-2003:244GHSA-7mfp-q9xp-qq39CERTCC-2002-561275BDU:2015-04064GHSA-cvpf-93m7-95jrDEBIAN-CVE-2003-0083RHSA-2002:184GHSA-g3vc-c43j-gjjvDSA-137RHSA-2002:134GHSA-vw24-98xw-c2qvRHSA-2002:248EUVD-2003-0143BDU:2015-03282EUVD-2002-0653RHSA-2003:106GHSA-mq68-g7rr-6m25RHSA-2002:126GHSA-36m7-hm82-xm8qGHSA-xchw-jqmw-jcvcBDU:2015-082031739813139RHSA-2002:163GHSA-rg25-cp4q-r4c8RHSA-2002:157CERTCC-2003-935264DSA-225EUVD-2002-0652EUVD-2001-1227BDU:2015-08200DSA-136-2RHSA-2003:075EUVD-2002-1217RHSA-2002:164GHSA-chfp-36fq-v6g3GHSA-2qc3-wjjq-65hvRHSA-2002:251EUVD-2003-0128CVE-2002-0839DSA-187DEBIAN-CVE-2002-0840CVE-2002-1233RHSA-2003:104CVE-2002-1394CVE-2002-0840GSD-2002-1374RHSA-2003:083EUVD-2003-0127BDU:2015-07479GHSA-v3q3-83mw-m54rVAR-200208-0144RHSA-2002:136CERTCC-2004-288574CERTCC-2002-258555GSD-2003-0542GSD-2003-0078CVE-2003-0020GSD-2002-0653CVE-2002-1375RHSA-2003:102CVE-2003-0078DEBIAN-CVE-2004-00799899DSA-393EUVD-2003-0187BDU:2015-08202BDU:2015-08201BDU:2015-07478DEBIAN-CVE-2003-0078GHSA-5cfw-vgxw-pqxmGSD-2002-1373DEBIAN-CVE-2004-0081EUVD-2002-0649GHSA-8phx-r45c-q556VHN-8509GSD-2004-0079BDU:2015-0406511139TA04-078ARHSA-2004:121CVE-2003-0851GHSA-5r59-c396-qwfmRHSA-2003:139VU#288574DEBIAN-CVE-2002-0656EUVD-2003-0537CVE-2002-1374CERTCC-2003-203897GHSA-v9gx-6vwh-26c3CVE-2001-0131EUVD-2004-0112CERTCC-2002-748355GHSA-m2h2-rm4v-5p5xEUVD-2005-1250RHSA-2003:101EUVD-2003-0146GSD-2004-0081GSD-2002-0657GSD-2002-1233cisco-sa-20040317-opensslRHSA-2004:119CERTCC-2003-434566GSD-2003-0192RHSA-2002:117CISA-2004-0079EUVD-2004-0081CVE-2002-0657DEBIAN-CVE-2003-0192DEBIAN-CVE-2003-0147CVE-2002-0655EUVD-2004-0079RHSA-2004:015EUVD-2002-0389GSD-2002-0840GHSA-4q57-g9fh-w67xBDU:2015-08198CVE-2002-0656CVE-2003-0543BDU:2015-07476RHSA-2003:062RHSA-2002:146BDU:2015-08199JVNDB-2004-000086RHSA-2003:063RHSA-2002:289RHSA-2003:301CVE-2002-1157EUVD-2002-0975BDU:2015-08205CVE-2004-0081CNNVD-200411-124CVE-2003-0192RHSA-2002:135GSD-2002-0985CVE-2003-0544GSD-2002-0656GHSA-9jw8-9j6r-p392EUVD-2002-0647GSD-2002-0843DEBIAN-CVE-2002-0392GHSA-7pf5-hfgr-ch72DSA-288GSD-2003-013117381EUVD-2002-0650GHSA-3626-95rf-mfw3DSA-188DEBIAN-CVE-2003-0131cisco-sa-20030930-sslCVE-2003-0150DSA-303CERTCC-2003-888801VAR-200208-0244CVE-2003-0073DSA-168BDU:2015-04062DEBIAN-CVE-2003-0543CVE-2003-0132GHSA-cc5w-cgc4-9qf732886BDU:2015-01378GHSA-2v5j-pf93-x5xrRHSA-2002:154RHSA-2002:153CERTCC-2002-104555GHSA-v5cr-9693-q9cgRHSA-2003:116CVE-2003-0083BDU:2015-07484BDU:2015-01443GHSA-3x2f-268g-8hg7GHSA-rf99-cxf6-755hDSA-181RHSA-2003:117DSA-212CVE-2002-1373CVE-2003-0789CVE-2002-0986GSD-2002-0655CERTCC-2003-255484GHSA-mmjc-3g2p-897mRHSA-2003:320CVE-2002-0843CVE-2002-0985GSD-2002-0986GSD-2004-0112CERTCC-2002-102795CERTCC-2003-549142GHSA-p3wx-7ggv-j5vxGHSA-gvcx-q88q-m695EUVD-2003-0079GHSA-xcj5-xcx2-vvvvGSD-2001-0131GSD-2003-0147CVE-2003-054518247CVE-2002-1376DEBIAN-CVE-2003-0132RHSA-2003:166CVE-2003-0254EUVD-2002-1144EUVD-2003-0074CVE-2002-0658EUVD-2003-006932887BDU:2015-0820817401CVE-2002-0653DEBIAN-CVE-2003-0542DEBIAN-CVE-2003-0254EUVD-2002-0835EUVD-2003-0538RHSA-2004:120CERTCC-2002-308891CERTCC-2004-484726CVE-2005-1247EUVD-2003-0842GHSA-6hh5-x52p-p482BDU:2015-08207VAR-200303-0118GHSA-pcwf-qwvv-qjg3RHSA-2003:082DEBIAN-CVE-2002-0657EUVD-2003-0780RHSA-2002:129GSD-2005-1247GSD-2002-0658EUVD-2002-1357CVE-2003-013114567DSA-394GSD-2003-0545GSD-2003-0851GSD-2002-1375EUVD-2002-1358RHSA-2003:094DEBIAN-CVE-2003-0020CERTCC-2003-412478EUVD-2002-1549DEBIAN-CVE-2002-0658DEBIAN-CVE-2003-0789DEBIAN-CVE-2003-0253CERTCC-2002-944335RHSA-2003:205CVE-2002-0659RHSA-2003:290VAR-200311-0091RHSA-2003:240DEBIAN-CVE-2002-1568RHSA-2003:158CVE-2004-0079VAR-200411-0172CERTCC-2003-206537EUVD-2022-1681DSA-253DEBIAN-CVE-2002-0655DSA-136-3VAR-200411-0171DEBIAN-CVE-2002-0659

References

Cryptographic libraries and applications do not adequately defend against timing attacks
advisory
Cryptographic libraries and applications do not adequately defend against timing attacks
url
Cryptographic libraries and applications do not adequately defend against timing attacks
url
Cryptographic libraries and applications do not adequately defend against timing attacks
url
Cryptographic libraries and applications do not adequately defend against timing attacks
url
Cryptographic libraries and applications do not adequately defend against timing attacks
url
Cryptographic libraries and applications do not adequately defend against timing attacks
url
Cryptographic libraries and applications do not adequately defend against timing attacks
url
Cryptographic libraries and applications do not adequately defend against timing attacks
url
Cryptographic libraries and applications do not adequately defend against timing attacks
url
Cryptographic libraries and applications do not adequately defend against timing attacks
url

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›