The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
| Link | Tags |
|---|---|
| http://www.isg.rhul.ac.uk/tls/TLStiming.pdf | |
| http://openwall.com/lists/oss-security/2013/02/05/24 | mailing list |
| http://rhn.redhat.com/errata/RHSA-2014-0371.html | vendor advisory |
| http://secunia.com/advisories/57719 | third party advisory |
| http://secunia.com/advisories/57716 | third party advisory |
| http://rhn.redhat.com/errata/RHSA-2014-0372.html | vendor advisory |