Description
OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).
Remediation
References
Related Vulnerabilities
WordPress Plugin Testimonial WordPress-AP Custom Testimonial Unspecified Vulnerability (1.4.7)
WordPress Plugin Buddy Share It Allusers FB YR Arbitrary File Upload (3.2.8)
MySQL CVE-2024-21230 Vulnerability (CVE-2024-21230)
WordPress Plugin Category Order and Taxonomy Terms Order PHP Object Injection (1.5.2.2)
WordPress Plugin Strong Testimonials Multiple Cross-Site Scripting Vulnerabilities (2.31.4)