Billy Brumley

**Nome do Software Vulnerável e Versões Afetadas** O nome do produto não pôde ser determinado (versões afetadas não especificadas) **Description** A descriptografia usando as cifras ChaCha20-Poly1305 e AES-OCB pode reportar sucesso sem verificar a tag de autenticação quando um texto cifrado vazio é processado através da função `EVP Cipher()`. Isso ocorre porque a função ignora a verificação da tag AEAD (Authenticated Encryption with Associated Data) nesses casos específicos. Consequentemente, aplicações que dependem do valor de retorno de `EVP Cipher()` para confirmar a integridade da mensagem podem aceitar mensagens forjadas. **Recommendations** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** A elevation of privilege vulnerability exists in the Android media framework, specifically in libstagefright. **Recommendations** For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenSSL versions 1.0.1u and earlier **Description** A timing attack flaw was found in OpenSSL that could allow a malicious user with local access to recover ECDSA P-256 private keys. The vulnerability is related to errors in cryptographic key management, which can be exploited to restore closed keys. **Recommendations** For OpenSSL versions 1.0.1u and earlier, consider restricting access to sensitive cryptographic operations until a patch is available. As a temporary workaround, limit the use of ECDSA P-256 private keys to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenSSL versions 1.0.2h and earlier **Description** The issue is related to the `dsa sign setup` function in OpenSSL, which does not ensure the use of constant-time operations. This makes it easier for local users to discover a DSA private key via a timing side-channel attack. The vulnerability can allow an attacker to recover the DSA private key under certain conditions, potentially affecting SSH servers that use DSA keys. **Recommendations** For OpenSSL versions 1.0.2h and earlier, consider upgrading to a version that addresses this issue, as the current version does not properly ensure the use of constant-time operations, making it vulnerable to timing side-channel attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.