Oval Definition:oval:com.ubuntu.xenial:def:201812437000
Revision Date:2018-06-14Version:1
Title:CVE-2018-12437 on Ubuntu 16.04 LTS (xenial) - medium.
Description:LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-12437
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND The 'libtomcrypt' package in xenial was vulnerable but has been fixed (note: '1.17-7ubuntu0.1').
  • BACK