LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

The remote host is affected by the vulnerability described in GLSA-202007-53 (Dropbear: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Dropbear. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

- Fix Side Channel Based ECDSA Key Extraction     (CVE-2018-12437) (PR #408)

  - Fix potential stack overflow when DER flexi-decoding     (CVE-2018-0739) (PR #373)

  - Fix two-key 3DES (PR #390)

  - Fix accelerated CTR mode (PR #359)

  - Fix Fortuna PRNG (PR #363)

  - Fix compilation on platforms where cc doesn't point to     gcc (PR #382)

  - Fix using the wrong environment variable LT instead of     LIBTOOL (PR #392)

  - Fix build on platforms where the compiler provides
    __WCHAR_MAX__ but wchar.h is not available (PR #390)

  - Fix & re-factor crypt_list_all_sizes() and     crypt_list_all_constants() (PR #414)

  - Minor fixes (PR's #350 #351 #375 #377 #378 #379)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fix Side Channel Based ECDSA Key Extraction     (CVE-2018-12437) (PR #408)

  - Fix potential stack overflow when DER flexi-decoding     (CVE-2018-0739) (PR #373)

  - Fix two-key 3DES (PR #390)

  - Fix accelerated CTR mode (PR #359)

  - Fix Fortuna PRNG (PR #363)

  - Fix compilation on platforms where cc doesn't point to     gcc (PR #382)

  - Fix using the wrong environment variable LT instead of     LIBTOOL (PR #392)

  - Fix build on platforms where the compiler provides     WCHAR_MAX but wchar.h is not available (PR #390)

  - Fix & re-factor crypt_list_all_sizes() and     crypt_list_all_constants() (PR #414)

  - Minor fixes (PR's #350 #351 #375 #377 #378 #379)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
139116	GLSA-202007-53 : Dropbear: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
120655	Fedora 28 : libtomcrypt (2018-9d667bdff8)	Nessus	Fedora Local Security Checks	medium
111238	Fedora 27 : libtomcrypt (2018-39e0872379)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2018-12437

medium

Tenable Plugins

medium

medium

medium