NetSight
IP …
medium5.9

CVE-2015-7744

wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key …

Impact

wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.

Affected products

VendorProductAffected versions
WolfsslWolfssl
before 3.6.8
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
MariadbMariadb
from 5.5.0 before 5.5.46
from 10.0.0 before 10.0.22
from 10.1.0 before 10.1.9

References