CVE ID:	CVE-2014-0076
Description:	The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.
Test IDs:	1.3.6.1.4.1.25623.1.0.105021   1.3.6.1.4.1.25623.1.0.105022   1.3.6.1.4.1.25623.1.0.702908   1.3.6.1.4.1.25623.1.0.105203   1.3.6.1.4.1.25623.1.0.105949   1.3.6.1.4.1.25623.1.0.105202   1.3.6.1.4.1.25623.1.0.105209   1.3.6.1.4.1.25623.1.0.850981   1.3.6.1.4.1.25623.1.1.4.2014.0761.1   1.3.6.1.4.1.25623.1.1.4.2014.0541.1   1.3.6.1.4.1.25623.1.1.4.2014.0539.1   1.3.6.1.4.1.25623.1.1.4.2014.0538.1   1.3.6.1.4.1.25623.1.0.117600   1.3.6.1.4.1.25623.1.0.117599
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0076 BugTraq ID: 66363 http://www.securityfocus.com/bid/66363 Cisco Security Advisory: 20140605 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl HPdes Security Advisory: HPSBGN03050 http://marc.info/?l=bugtraq&m=140482916501310&w=2 HPdes Security Advisory: HPSBMU03051 http://marc.info/?l=bugtraq&m=140448122410568&w=2 HPdes Security Advisory: HPSBMU03056 http://marc.info/?l=bugtraq&m=140389355508263&w=2 HPdes Security Advisory: HPSBMU03057 http://marc.info/?l=bugtraq&m=140389274407904&w=2 HPdes Security Advisory: HPSBMU03062 http://marc.info/?l=bugtraq&m=140752315422991&w=2 HPdes Security Advisory: HPSBMU03074 http://marc.info/?l=bugtraq&m=140621259019789&w=2 HPdes Security Advisory: HPSBMU03076 http://marc.info/?l=bugtraq&m=140904544427729&w=2 HPdes Security Advisory: HPSBOV03047 http://marc.info/?l=bugtraq&m=140317760000786&w=2 HPdes Security Advisory: HPSBUX03046 http://marc.info/?l=bugtraq&m=140266410314613&w=2 HPdes Security Advisory: SSRT101590 http://marc.info/?l=bugtraq&m=140266410314613&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2014:067 http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 http://eprint.iacr.org/2014/140 http://secunia.com/advisories/58492 http://secunia.com/advisories/58727 http://secunia.com/advisories/58939 http://secunia.com/advisories/59040 http://secunia.com/advisories/59162 http://secunia.com/advisories/59175 http://secunia.com/advisories/59264 http://secunia.com/advisories/59300 http://secunia.com/advisories/59364 http://secunia.com/advisories/59374 http://secunia.com/advisories/59413 http://secunia.com/advisories/59438 http://secunia.com/advisories/59445 http://secunia.com/advisories/59450 http://secunia.com/advisories/59454 http://secunia.com/advisories/59490 http://secunia.com/advisories/59495 http://secunia.com/advisories/59514 http://secunia.com/advisories/59655 http://secunia.com/advisories/59721 http://secunia.com/advisories/60571 SuSE Security Announcement: openSUSE-SU-2014:0480 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-04/msg00007.html SuSE Security Announcement: openSUSE-SU-2016:0640 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html http://www.ubuntu.com/usn/USN-2165-1