PT-2015-3386 · Openssl+4 · Openssl+4
Hanno Böck
·
Published
2015-12-03
·
Updated
2024-06-15
·
CVE-2015-3193
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
OpenSSL versions 1.0.2 through 1.0.2e
Description
The Montgomery squaring implementation in crypto/bn/asm/x86 64-mont5.pl mishandles carry propagation and produces incorrect output, making it easier for remote attackers to obtain sensitive private-key information via an attack against use of a Diffie-Hellman (DH) or Diffie-Hellman Ephemeral (DHE) ciphersuite. This issue affects the BN mod exp function.
Recommendations
For versions 1.0.2 through 1.0.2e, update to version 1.0.2e or later to resolve the issue. As a temporary workaround, consider restricting the use of Diffie-Hellman (DH) or Diffie-Hellman Ephemeral (DHE) ciphersuites until a patch is available.
Exploit
Fix
DoS
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Wls
Junos
Openssl
Suse
Ubuntu