Security Advisory
CVE-2016-3995
7.5
HIGH
Vulnerability Description
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks.
Published Date
February 13, 2017
Official Source
NIST NVD Advisory