This is a potential security issue, you are being redirected to http://nvd.nist.gov
Search & Statistics
CVSS V3 Calculator
CVSS V2 Calculator
Checklist (NCP) Repository
SCAP Validated Tools
This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided.
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.
View Analysis Description
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because
they may have information that would be of interest to you. No inferences should be drawn on account of other sites
being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose.
NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further,
NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about
this page to firstname.lastname@example.org.
Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.
https://github.com/openssl/openssl/commit/a59b90bf491410f1f2bc4540cc21f1980fd14c5b [No Types Assigned]
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html [No Types Assigned]
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc [No Types Assigned]
https://www.tenable.com/security/tns-2017-04 [No Types Assigned]
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html [No Types Assigned]
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html [No Types Assigned]
http://www.securitytracker.com/id/1037717 [No Types Assigned]
https://security.gentoo.org/glsa/201702-07 [No Types Assigned]
http://www.securityfocus.com/bid/95814 No Types Assigned
http://www.securityfocus.com/bid/95814 Third Party Advisory, VDB Entry
https://www.openssl.org/news/secadv/20170126.txt No Types Assigned
https://www.openssl.org/news/secadv/20170126.txt Vendor Advisory
http://www.securityfocus.com/bid/95814 [No Types Assigned]