Medium severity5.7NVD Advisory· Published Dec 3, 2018· Updated Jun 17, 2026
CVE-2018-16869
CVE-2018-16869
Description
A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4(expand)+ 1 more
- (no CPE)
- (no CPE)range: n/a
- osv-coords2 versionspkg:rpm/suse/libnettle&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015pkg:rpm/suse/libnettle&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015
< 3.4-4.3.1+ 1 more
- (no CPE)range: < 3.4-4.3.1
- (no CPE)range: < 3.4-4.3.1
Patches
Vulnerability mechanics
References
3- cat.eyalro.netnvdTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/106092nvdBroken LinkThird Party AdvisoryVDB Entry
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.