NetSight
IP …
high7.5

CVE-2015-3193

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp functi…

Impact

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.

Affected products

VendorProductAffected versions
OpensslOpenssl
Versions 1.0.2, 1.0.2a, 1.0.2b, 1.0.2c, 1.0.2d
NodejsNode.Js
from 4.0.0 through 4.1.2
from 4.2.0 before 4.2.3
from 5.0.0 before 5.1.1
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10

Weakness classification

CWE-200

References