QwikSec

Security Database

CVE

CWE

Training

CVE-2015-5738

Published: Jul 26, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf

x_refsource_MISC

https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html

x_refsource_CONFIRM

http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.