CVE-2016-7056: canonical ubuntu_linux Covert Timing Channel
Vulnerability summary
CVE-2016-7056 is a medium (CVSS 5.5) Covert Timing Channel vulnerability in canonical ubuntu_linux. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 49.6% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 13 · Related 8Timeline
- 10-09-2018PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.
CVSS metrics
6 scores · 5 sources · 2 versions- NVDNIST5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · Red hatEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
0.62%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
Increase +0.02 pp
From 0.59% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-385Covert Timing ChannelCovert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.
- CWE-320Key Management ErrorsWeaknesses in this category are related to errors in the management of cryptographic keys.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat7 products
- enterprise_linuxEOL6.0 | 7.0
- openssl< 1:1.0.2k-8.el7
- openssl-debuginfo< 1:1.0.2k-8.el7
- openssl-devel< 1:1.0.2k-8.el7
- openssl-libs< 1:1.0.2k-8.el7
Debian2 products
- openssl< 1.0.2a-1
- debian_linuxEOL8.0 | 9.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04
Openssl1 product
- openssl≤ 1.0.1u
The openssl project1 product
- opensslopenssl 1.0.1u
Ubuntu1 product
- openssl< 1.0.1f-1ubuntu2.22
6 vendors · 13 products
References
39 links- ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/016_libcrypto.patch.sigX Refsource CONFIRMPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7056X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
Show all 39 references
- people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7056.htmlX Refsource CONFIRMPatchThird Party Advisory
- ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/033_libcrypto.patch.sigX Refsource CONFIRMPatchThird Party Advisory
- security-tracker.debian.org/tracker/CVE-2016-7056X Refsource CONFIRMPatchThird Party AdvisoryVDB EntryAdvisory
