Description
The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Buffer Over-read Vulnerability (CVE-2026-44185)
WordPress Plugin WP Data Access Privilege Escalation (5.3.7)
WordPress Plugin Comments-wpDiscuz SQL Injection (5.3.5)
XWiki Missing Authorization Vulnerability (CVE-2022-36091)
Jenkins Incorrect Default Permissions Vulnerability (CVE-2023-43496)