CVE

Id
85021  
CVE No.
CVE-2015-7744  
Status
Candidate  
Description
wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.  
Phase
Assigned (20151007)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
751080 85021 CVE-2015-7744 MISC:https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf  View
751081 85021 CVE-2015-7744 MISC:https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/  View
751082 85021 CVE-2015-7744 CONFIRM:http://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html  View
751083 85021 CVE-2015-7744 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
751084 85021 CVE-2015-7744 CONFIRM:https://wolfssl.com/wolfSSL/Blog/Entries/2015/9/17_Two_Vulnerabilities_Recently_Found%2C_An_Attack_on_RSA_using_CRT_and_DoS_Vulnerability_With_DTLS.html  View
751085 85021 CVE-2015-7744 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
751086 85021 CVE-2015-7744 SUSE:openSUSE-SU-2016:0367  View
751087 85021 CVE-2015-7744 URL:http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html  View
751088 85021 CVE-2015-7744 SUSE:openSUSE-SU-2016:0377  View
751089 85021 CVE-2015-7744 URL:http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html  View
751090 85021 CVE-2015-7744 SECTRACK:1034708  View

Related JVN