Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/257676 | Third Party Advisory |
| https://www.ibm.com/support/pages/node/7145168 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/257676 | Third Party Advisory |
| https://www.ibm.com/support/pages/node/7145168 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
25 Jul 2025, 21:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/257676 - Third Party Advisory | |
| References | () https://www.ibm.com/support/pages/node/7145168 - Vendor Advisory | |
| First Time |
Ibm common Cryptographic Architecture
Ibm aix Linux Ibm Linux linux Kernel Ibm i |
|
| CPE | cpe:2.3:a:ibm:common_cryptographic_architecture:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:* cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* |
21 Nov 2024, 08:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/257676 - | |
| References | () https://www.ibm.com/support/pages/node/7145168 - |
26 Mar 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-26 14:15
Updated : 2025-07-25 21:09
NVD link : CVE-2023-33855
Mitre link : CVE-2023-33855
CVE.ORG link : CVE-2023-33855
JSON object : View
Products Affected
ibm
- common_cryptographic_architecture
- aix
- i
linux
- linux_kernel
CWE
CWE-385
Covert Timing Channel