Dan Boneh

Name of the Vulnerable Software and Affected Versions: Zcashd versions prior to 2.1.1-1 Description: The issue allows an attacker to leverage the time offset between messages to obtain sensitive information about the relationship between a suspected victim's address and an IP address, utilizing a timing side channel. Recommendations: For versions prior to 2.1.1-1, update to version 2.1.1-1 or later to resolve the issue.

The issue allows remote attackers to obtain speech signals from a device's physical environment via a crafted web site that listens for `ondeviceorientation` events. This is achieved by not properly restricting access to high-rate gyroscope data.

The issue allows remote attackers to obtain potentially sensitive information from a fragment identifier by leveraging access to an IFRAME element associated with a different domain.

The issue concerns multiple vulnerabilities in the OpenSSL package of Red Hat Linux, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited by determining factors using timing differences on the number of extra reductions during Montgomery reduction and the use of different integer multiplication algorithms.