CVE-2018-16869

Name of the Vulnerable Software and Affected Versions Nettle (affected versions not specified)

Description The issue is related to a Bleichenbacher type side-channel based padding oracle attack in the way Nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. This could allow an attacker who is able to run a process on the same physical core as the victim process to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server. The attack exploits an error in the reverse conversion of decrypted RSA data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.