CWE-385 · Other weaknesses
Covert Timing Channel
36CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
36 CVEs with CWE-385 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2018-10845It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks…Gnu · gnutls · CVSS 5.9 · 2018-08-22 | 5.9 | 3.6% | 2018-08-22 |
| CVE-2018-10844It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks…Gnu · gnutls · CVSS 5.9 · 2018-08-22 | 5.9 | 3.6% | 2018-08-22 |
| CVE-2020-25659python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.Cryptography.io · python-cryptography · 2021-01-11 | – | 2.5% | 2021-01-11 |
| CVE-2020-25657A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#…M2crypto Project · m2crypto · 2021-01-12 | – | 1.8% | 2021-01-12 |
| CVE-2020-25658It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted…Sybren A. Stüvel · python-rsa · CVSS 7.5 · 2020-11-12 | 7.5 | 1.7% | 2020-11-12 |
| CVE-2025-9231Timing side-channel in SM2 algorithm on 64 bit ARMOpenSSL · OpenSSL · CVSS 5.9 · 2025-09-30 | 5.9 | 1.6% | 2025-09-30 |
| CVE-2019-3732RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) v…Dell · RSA BSAFE Crypto-C Micro Edition · CVSS 5.9 · 2019-09-30 | 5.9 | 1.4% | 2019-09-30 |
| CVE-2023-46809Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack - http…NodeJS · Node · CVSS 7.4 · 2024-09-07 | 7.4 | 1.3% | 2024-09-07 |
| CVE-2020-29506Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.Dell · Dell BSAFE Crypto-C Micro Edition · CVSS 6.8 · 2022-07-11 | 6.8 | 1.2% | 2022-07-11 |
| CVE-2026-5598Non-constant time comparisons risk private key leakage in FrodoKEM.Legion of the Bouncy Castle Inc. · BC-JAVA · CVSS 7.5 · 2026-04-15 | 7.5 | 1.2% | 2026-04-15 |
| CVE-2024-2236Libgcrypt: vulnerable to marvin attackSiemens · libgcrypt · CVSS 5.9 · 2024-03-06 | 5.9 | 1.1% | 2024-03-06 |
| CVE-2024-26306iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be…Es · Iperf3 · CVSS 5.9 · 2024-05-13 | 5.9 | 1.1% | 2024-05-13 |
| CVE-2022-24409Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with act…Dell · Dell BSAFE SSL-J · CVSS 5.9 · 2022-02-23 | 5.9 | 1.0% | 2022-02-23 |
| CVE-2020-14341The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary host…Red Hat · Red Hat Single Sign-On · 2021-01-12 | – | 1.0% | 2021-01-12 |
| CVE-2020-35164Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.Dell · Dell BSAFE Crypto-C Micro Edition · CVSS 6.7 · 2022-07-11 | 6.7 | 0.8% | 2022-07-11 |
| CVE-2023-3640Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area m…Red Hat · Red Hat Enterprise Linux 6 · CVSS 7 · 2023-07-24 | 7.0 | 0.8% | 2023-07-24 |
| CVE-2024-13176Timing side-channel in ECDSA signature computationOpenSSL · OpenSSL · CVSS 4.6 · 2025-01-20 | 4.6 | 0.7% | 2025-01-20 |
| CVE-2020-35166Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.Dell · BSAFE Crypto-C Micro Edition · CVSS 5.1 · 2022-07-11 | 5.1 | 0.7% | 2022-07-11 |
| CVE-2017-2624It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed…Xorg · xorg-x11-server · CVSS 5.9 · 2018-07-27 | 5.9 | 0.7% | 2018-07-27 |
| CVE-2024-25964Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leadin…Dell · PowerScale OneFS · CVSS 5.3 · 2024-03-25 | 5.3 | 0.7% | 2024-03-25 |
| CVE-2025-0306Ruby: openssl: ruby marvin attackRedhat · Ruby · CVSS 7.4 · 2025-01-09 | 7.4 | 0.7% | 2025-01-09 |
| CVE-2016-7056A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.The OpenSSL Project · openssl · CVSS 5.5 · 2018-09-10 | 5.5 | 0.6% | 2018-09-10 |
| CVE-2023-49092RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannelsRustCrypto · RSA · CVSS 5.9 · 2023-11-28 | 5.9 | 0.6% | 2023-11-28 |
| CVE-2025-59425vLLM vulnerable to timing attack at bearer authvllm-project · vllm · CVSS 7.5 · 2025-10-07 | 7.5 | 0.6% | 2025-10-07 |
| CVE-2026-6478PostgreSQL discloses MD5-hashed passwords via covert timing channelPostgresql · PostgreSQL · CVSS 6.5 · 2026-05-14 | 6.5 | 0.6% | 2026-05-14 |
| CVE-2024-45192An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementa…Matrix · Olm · CVSS 5.3 · 2024-08-22 | 5.3 | 0.5% | 2024-08-22 |
| CVE-2025-49087In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.Mbed · mbedtls · CVSS 4 · 2025-07-20 | 4.0 | 0.5% | 2025-07-20 |
| CVE-2025-27587OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign…No vendor recorded · CVSS 5.3 · 2025-06-16 | 5.3 | 0.5% | 2025-06-16 |
| CVE-2023-33855IBM Common Cryptographic Architecture information disclosureIBM · Common Cryptographic Architecture · CVSS 3.7 · 2024-03-26 | 3.7 | 0.5% | 2024-03-26 |
| CVE-2018-10846A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of "Just in Time" P…Gnu · gnutls · CVSS 5.3 · 2018-08-22 | 5.3 | 0.4% | 2018-08-22 |
| CVE-2024-23170An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a…Arm · Mbed Tls · CVSS 5.5 · 2024-01-31 | 5.5 | 0.3% | 2024-01-31 |
| CVE-2025-66442In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto thro…Arm · Mbed Tls · CVSS 5.1 · 2026-04-01 | 5.1 | 0.3% | 2026-04-01 |
| CVE-2025-69893A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe…No vendor recorded · CVSS 4.6 · 2026-04-14 | 4.6 | 0.3% | 2026-04-14 |
| CVE-2025-7396Curve25519 BlindingwolfSSL · wolfSSL · CVSS 5.6 · 2025-07-18 | 5.6 | 0.2% | 2025-07-18 |
| CVE-2024-11862Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacksDevolutions · XTS.NET · CVSS 5.1 · 2024-11-27 | 5.1 | 0.1% | 2024-11-27 |
| CVE-2026-44519liboqs: Missing value barrier in FO implicit rejection path (FrodoKEM, NTRU, and others)open-quantum-safe · liboqs · CVSS 5.1 · 2026-11-06 | 5.1 | 0.1% | 2026-11-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.