Advisories · Weakness
CWE-385.
Every Advisory and CVE whose sources give the weakness CWE-385, newest first.
- CVSS 6.3 Medium
phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
- CWE-208
- CWE-385
<3.0.57 || >=4.0.0, <4.0.1 · fixed in 3.0.57, 4.0.1
GHSA-q97c-8qh3-fpc6 · CVE-2026-84308 - CVSS 3.7 Low
free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
- Information disclosure
- CWE-208
<1.4.5 · fixed in 1.4.5
GHSA-fp46-6vfw-gc9c · CVE-2026-55785 - CVSS 4.0, no score published
PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle
- CWE-208
- CWE-385
<3.4.10 || >=4.0.0, <4.0.7 || >=4.1.0, <4.1.7 · fixed in 3.4.10, 4.0.7, 4.1.7
GHSA-5739-39v2-5754 - CVSS 6.5 Medium
PostgreSQL discloses MD5-hashed passwords via covert timing channel
- PostgreSQL
- CWE-385
- CVSS 8.9 High
Bouncy Castle Has Covert Timing Channel Vulnerability
- CWE-385
>=1.71, <1.84 · fixed in 1.84
GHSA-p93r-85wp-75v3 · CVE-2026-5598 - CVSS 4.6 Medium
A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe v1.13.0 to v1.14.0…
- CWE-385
- CVSS 5.1 Medium
In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature.
- CWE-385
- CVSS 7.0 High
OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper
- CWE-385
- CWE-807
<2026.3.28 · fixed in 2026.3.28
GHSA-6pfc-6m7w-m8fx · CVE-2026-41390 - CVSS 7.5 High
vLLM is vulnerable to timing attack at bearer auth
- CWE-385
<0.11.0 · fixed in 0.11.0
GHSA-wr9h-g72x-mwhm · CVE-2025-59425 - CVSS 6.5 Medium
Timing side-channel in SM2 algorithm on 64 bit ARM
- OpenSSL
- CWE-385
- CVSS 6.6 Medium
Timing Attack Vulnerability in SCRAM Authentication
- CWE-208
- CWE-385
<3.2 · fixed in 3.2
GHSA-3wfh-36rx-9537 · CVE-2025-59432 - CVSS 4.0 Medium
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.
- mbedtls
- CWE-385
- CVSS 5.6 Medium
Curve25519 Blinding
- wolfSSL
- CWE-385
- CVSS 7.7 High
File Browser’s insecure JWT handling can lead to session replay attacks after logout
- Authentication bypass
- CWE-305
<=2.39.0 · no fixed version yet
GHSA-7xwp-2cpp-p8r7 · CVE-2025-53826 - CVSS 5.3 Medium
OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using…
- CWE-385
- CVSS 5.8 Medium
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations
- Information disclosure
- CWE-208
<=0.8.0b2 · no fixed version yet
GHSA-q65w-fg65-79f4 · CVE-2025-29780 - CVSS 4.1 Medium
Timing side-channel in ECDSA signature computation
- OpenSSL
- CWE-385
- CVSS 7.4 High
Ruby: openssl: ruby marvin attack
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-385
- CVSS 5.1 Medium
Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications
- CWE-385
<2024.11.26 · fixed in 2024.11.26
GHSA-j6vm-4r7g-x4gr · CVE-2024-11862 - CVSS 7.4 High
Node: Node.js versions which bundle an unpatched version of OpenSSL or run against a…
- Node
- CWE-385
- CVSS 5.3 Medium
An issue was discovered in Matrix libolm through 3.2.16.
- CWE-385
- CVSS 5.9 Medium
Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options
- open-quantum-safe liboqs
- CWE-208
- CWE-385
- CVSS 8.2 High
Observable Timing Discrepancy in pypqc
- CWE-385
- CWE-733
>=0.0.4, <=0.0.6.2 · no fixed version yet
GHSA-hvh4-5qr6-3v7r - CVSS 5.9 Medium
iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations.
- CWE-385
- CVSS 3.7 Low
IBM Common Cryptographic Architecture information disclosure
- IBM Common Cryptographic Architecture
- CWE-385
- CVSS 5.3 Medium
Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability.
- Dell PowerScale OneFS
- CWE-385
- CVSS 5.9 Medium
Libgcrypt: vulnerable to marvin attack
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.2 Extended Update Support
- CWE-385
- CVSS 7.5 High
m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657
- Information disclosure
- CWE-208
<=0.40.1 · no fixed version yet
GHSA-944j-8ch6-rf6x · CVE-2023-50781 - CVSS 7.5 High
Python Cryptography package vulnerable to Bleichenbacher timing oracle attack
- Information disclosure
- CWE-208
<42.0.0 · fixed in 42.0.0
GHSA-3ww4-gg4f-jr7f · CVE-2023-50782 - CVSS 5.5 Medium
An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2.
- CWE-385
- CVSS 7.4 High
Minerva timing attack on P-256 in python-ecdsa
- Information disclosure
- CWE-208
* · no fixed version yet
GHSA-wj6h-64fc-37mp · CVE-2024-23342 - CVSS 5.9 Medium
Marvin Attack: potential key recovery through timing sidechannels
- CWE-385
>=0.0.0-0 · no fixed version yet
GHSA-4grx-2x9w-596c · CVE-2023-49092 - CVSS 7.0 High
Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user s…
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- CWE-385
- CVSS 5.1 Medium
Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…
- Dell BSAFE Crypto-C Micro Edition
- Dell BSAFE Micro Edition Suite
- CWE-385
- CVSS 6.7 Medium
Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…
- Dell BSAFE Crypto-C Micro Edition
- CWE-385
- CVSS 6.8 Medium
Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…
- Dell BSAFE Crypto-C Micro Edition
- CWE-385
- CVSS 7.5 High
Covert Timing Channel in Apache CXF
- CWE-385
<3.0.13 || >=3.1.0, <3.1.10 · fixed in 3.0.13, 3.1.10
GHSA-qc2p-q7x9-v64p · CVE-2017-3156 - CVSS 5.9 Medium
Dell BSAFE SSL-J: Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may…
- Dell BSAFE SSL-J
- CWE-385
- CVSS 7.5 High
Timing attacks in python-rsa
- Weak cryptography or TLS
- CWE-385
>=2.1, <4.7 · fixed in 4.7
GHSA-xrx6-fmxq-rjj2 · CVE-2020-25658 -
m2crypto: A flaw was found in all released versions of m2crypto…
- m2crypto
- CWE-385
-
The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary hosts and ports of the u…
- Red Hat Single Sign-On
- CWE-385
- CVSS 5.9 Medium
RSA decryption vulnerable to Bleichenbacher timing vulnerability
- CWE-385
<3.2 · fixed in 3.2
GHSA-hggm-jpg3-v476 · CVE-2020-25659 - CVSS 5.5 Medium
Observable discrepancy in [UNKNOWN] Linux Kernel
- [UNKNOWN] Linux Kernel
- Information disclosure
- CWE-385
- CVSS 5.9 Medium
Dell RSA BSAFE Crypto-C Micro Edition: RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior…
- Dell RSA BSAFE Crypto-C Micro Edition
- Dell RSA BSAFE MES
- CWE-385
- CVSS 5.5 Medium
openssl: A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious…
- openssl
- CWE-385
- CVSS 5.3 Medium
[UNKNOWN] gnutls: A cache-based side channel in GnuTLS implementation that leads to plain text recovery in…
- [UNKNOWN] gnutls
- CWE-385
- CVSS 5.9 Medium
[UNKNOWN] gnutls: It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky…
- [UNKNOWN] gnutls
- CWE-385
- CVSS 5.9 Medium
[UNKNOWN] gnutls: It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky…
- [UNKNOWN] gnutls
- CWE-385
- CVSS 5.9 Medium
xorg-x11-server: It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the…
- xorg-x11-server
- CWE-385