NVD

Id
26810  
Name
CVE-2015-5738  
Description
The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-07-26  
Modified Date
2016-08-02  
Seq
2015-5738  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
141905 26810 CVE-2015-5738 http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions  View
141906 26810 CVE-2015-5738 https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf  View
141907 26810 CVE-2015-5738 https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11899 JVNDB-2015-007219 Cavium Software Development Kit の RSA-CRT の実装における RSA 秘密鍵を取得される脆弱性 Cavium Software Development Kit (SDK) の RSA-CRT の実装には、Perfect Forward Secrecy (PFS) を利用した TLS をサポートする Linux 上で稼動する OCTEON II CN6xxx で使用される場合、RSA 秘密鍵を取得される脆弱性が存在します。 CVE-2015-5738 82963 CVE-2015-5738 26810 7.8 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007219.html 2015-12-14 2016-08-03 View