Back to Database
Status published
High
CVE-2016-3995
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++...
Vulnerability Description
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-3995
Credits & Attribution
No credits recorded in the NVD database.
References
More from cryptopp
View All →CVE-2022-48570
Crypto++ through 8.4 contains a timing side channel in ECDSA...
High
7.5
CVE-2021-43398
Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage...
Medium
5.3
CVE-2021-40530
The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery...
Medium
5.9
CVE-2019-14318
Crypto++ 8.3.0 and earlier contains a timing side channel in...
Medium
5.9
CVE-2017-9434
Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability...
Medium
5.3
Affected Vendor
cryptopp
View all reports →Affected Software
crypto\+\+
Vulnerable Versions:
0
Timeline
Official Publish:
February 13th, 2017
Last Modified:
August 6th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.