CVE-2014-0076

CVE-2014-0076 describes a side-channel vulnerability in the Montgomery ladder implementation of OpenSSL versions up to 1.0.0l. This flaw allows local attackers to potentially recover ECDSA nonces by observing non-constant-time swap operations via a FLUSH+RELOAD cache attack. The vulnerability has a low CVSS score of 1.9, indicating a local attack vector with medium complexity and a partial impact on confidentiality. While there is no known active exploitation or publicly available exploit code, the vulnerability has garnered some community discussion and media coverage, suggesting it was a notable concern at the time of its discovery.