NVD

Id
28711  
Name
CVE-2015-8618  
Description
The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-01-27  
Modified Date
2016-05-26  
Seq
2015-8618  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151010 28711 CVE-2015-8618 FEDORA-2016-5a073cbd93  View
151011 28711 CVE-2015-8618 FEDORA-2016-2dcc094217  View
151012 28711 CVE-2015-8618 openSUSE-SU-2016:1331  View
151013 28711 CVE-2015-8618 [oss-security] 20151221 CVE request for math/big.Exp  View
151014 28711 CVE-2015-8618 [oss-security] 20151222 Re: CVE request for math/big.Exp  View
151015 28711 CVE-2015-8618 [oss-security] 20160113 [security] Go security release v1.5.3  View
151016 28711 CVE-2015-8618 https://github.com/golang/go/issues/13515  View
151017 28711 CVE-2015-8618 https://go-review.googlesource.com/#/c/17672/  View
151018 28711 CVE-2015-8618 [golang-announce] 20160113 [security] Go 1.5.3 is released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11567 JVNDB-2015-006887 Go の math/big ライブラリ内の Int.Exp Montgomery コードにおける RSA 秘密鍵を取得される脆弱性 Go の math/big ライブラリ内の Int.Exp Montgomery コードは、キャリープロパゲーションを誤って処理し、不正な出力を生成するため、RSA 秘密鍵を取得される脆弱性が存在します。 CVE-2015-8618 85843 CVE-2015-8618 28711 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006887.html 2015-12-07 2016-02-25 View