Covert Timing Channel

Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.

1. It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks…CVE-2018-10845gnutls · CVSS 5.9 · 3.6% likely
2. It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks…CVE-2018-10844gnutls · CVSS 5.9 · 3.6% likely
3. python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.CVE-2020-25659python-cryptography · 2.5% likely
4. A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#…CVE-2020-25657m2crypto · 1.8% likely
5. It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted…CVE-2020-25658Sybren A. Stüvel · CVSS 7.5 · 1.7% likely
6. Timing side-channel in SM2 algorithm on 64 bit ARMCVE-2025-9231OpenSSL · CVSS 5.9 · 1.6% likely
7. RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) v…CVE-2019-3732Dell · CVSS 5.9 · 1.4% likely
8. Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack - http…CVE-2023-46809NodeJS · CVSS 7.4 · 1.3% likely
9. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.CVE-2020-29506Dell · CVSS 6.8 · 1.2% likely
10. Non-constant time comparisons risk private key leakage in FrodoKEM.CVE-2026-5598Legion of the Bouncy Castle Inc. · CVSS 7.5 · 1.2% likely
11. Libgcrypt: vulnerable to marvin attackCVE-2024-2236Red Hat · CVSS 5.9 · 1.1% likely
12. iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be…CVE-2024-26306Es · CVSS 5.9 · 1.1% likely
13. Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with act…CVE-2022-24409Dell · CVSS 5.9 · 1.0% likely
14. The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary host…CVE-2020-14341Red Hat · 1.0% likely
15. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.CVE-2020-35164Dell · CVSS 6.7 · 0.8% likely
16. Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area m…CVE-2023-3640Red Hat · CVSS 7 · 0.8% likely
17. Timing side-channel in ECDSA signature computationCVE-2024-13176OpenSSL · CVSS 4.6 · 0.7% likely
18. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.CVE-2020-35166Dell · CVSS 5.1 · 0.7% likely
19. It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed…CVE-2017-2624Xorg · CVSS 5.9 · 0.7% likely
20. Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leadin…CVE-2024-25964Dell · CVSS 5.3 · 0.7% likely
21. Ruby: openssl: ruby marvin attackCVE-2025-0306Red Hat · CVSS 7.4 · 0.7% likely
22. A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.CVE-2016-7056The OpenSSL Project · CVSS 5.5 · 0.6% likely
23. RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannelsCVE-2023-49092RustCrypto · CVSS 5.9 · 0.6% likely
24. vLLM vulnerable to timing attack at bearer authCVE-2025-59425vllm-project · CVSS 7.5 · 0.6% likely
25. PostgreSQL discloses MD5-hashed passwords via covert timing channelCVE-2026-6478Postgresql · CVSS 6.5 · 0.6% likely
26. An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementa…CVE-2024-45192Matrix · CVSS 5.3 · 0.5% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.