Threats tagged 'ghsa-r9fv-h47r-823f'

CVE-2024-13176 is a timing side-channel vulnerability in the ECDSA signature computation affecting certain elliptic curves, notably NIST P-521. The vulnerability could allow an attacker with local access or a very low-latency network connection to measure timing differences and potentially recover the private key. The timing signal is approximately 300 nanoseconds when the top word of the inverted ECDSA nonce is zero. Due to the difficulty of exploiting this timing leak, the severity is considered low to medium.