CVE-2015-7744
EUVD-2015-764422.01.2016, 15:59
wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| wolfssl | wolfssl | 𝑥 < 3.6.8 |
| opensuse | leap | 42.1 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
| mariadb | mariadb | 5.5.0 ≤ 𝑥 < 5.5.46 |
| mariadb | mariadb | 10.0.0 ≤ 𝑥 < 10.0.22 |
| mariadb | mariadb | 10.1.0 ≤ 𝑥 < 10.1.9 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mariadb-10.0 |
| ||||||||||||||||||||||||||||||||||||||
| mariadb-5.5 |
| ||||||||||||||||||||||||||||||||||||||
| mysql-5.5 |
| ||||||||||||||||||||||||||||||||||||||
| mysql-5.6 |
| ||||||||||||||||||||||||||||||||||||||
| percona-server-5.6 |
| ||||||||||||||||||||||||||||||||||||||
| percona-xtradb-cluster-5.5 |
| ||||||||||||||||||||||||||||||||||||||
| percona-xtradb-cluster-5.6 |
|
References