Description

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.

Remediation

References

CVE-2015-3193

Related Vulnerabilities

WordPress Plugin Favicon by RealFaviconGenerator Unspecified Vulnerability (1.2.13)

WordPress CVE-2014-5203 Vulnerability (CVE-2014-5203)

WordPress Plugin GA Top post for WP by Asentechllc Security Bypass (1.0)

IBMHttpServer CVE-2012-5955 Vulnerability (CVE-2012-5955)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (1.7.2)

Severity

High

Classification

CVE-2015-3193 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities