CVE-2015-3193

7.5

HIGHCVSS v3

Published

December 6, 2015

CVSS v2

5 MEDIUM

Affected

6 projects

Assigned by

Red Hat

Severity scale

010

Description

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.

openssl/openssl

GitHubGeneral purpose TLS and crypto library

= 1.0.2a, = 1.0.2b, = 1.0.2c, = 1.0.2, = 1.0.2dNVD

openssl

NPMNodejs openssl wrapper

= 1.0.2a, = 1.0.2b, = 1.0.2c, = 1.0.2, = 1.0.2dNVD

nodejs

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python bindings and utils for Node.js and io.js

>= 4.0.0, <= 4.1.2, >= 4.2.0, < 4.2.3, >= 5.0.0, < 5.1.1NVD

nodejs

NPM

>= 4.0.0, <= 4.1.2, >= 4.2.0, < 4.2.3, >= 5.0.0, < 5.1.1NVD

Node.js

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

>= 4.0.0, <= 4.1.2, >= 4.2.0, < 4.2.3, >= 5.0.0, < 5.1.1NVD

openssl

Crates.ioOpenSSL bindings

= 1.0.2a, = 1.0.2b, = 1.0.2c, = 1.0.2, = 1.0.2dNVD

Security Advisories

CVE-2015-3193

Description

More on this CVE