Threats tagged 'ghsa-9qr7-mmm2-9f2r'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.7	EPSS 0.5%	CVE-2026-77696Issue summary · SM2 signature generation uses non-constant-time arithmetic on secret values, forming a Low3.7EPSS 0.5%2026-09-29GCVE DatabaseCVE-2026-77696 A timing side-channel vulnerability exists in OpenSSL's SM2 signature generation, where non-constant-time arithmetic on secret values may allow attackers to infer sensitive information. This issue affects multiple OpenSSL versions used in various Ubuntu LTS releases. The vulnerability has a low CVSS score of 3.7 and does not impact integrity or availability. Official patches are available from Ubuntu to address this issue. EPSS 0.5%Report on CVE-2026-77696 Vulnerability CWE-208 #ghsa-9qr7-mmm2-9f2r	GCVE Database	2026-09-29

Page 1 of 1