CVE-2007-3108
CVE-2007-3108
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
Original sources
- http://support.attachmate.com/techdocs/2374.html
- http://www.kb.cert.org/vuls/id/RGII-74KLP3
- http://www.kb.cert.org/vuls/id/724968
- http://secunia.com/advisories/26893
- http://www.debian.org/security/2008/dsa-1571
- http://secunia.com/advisories/27205
- http://www.securityfocus.com/archive/1/476341/100/0/threaded
- http://secunia.com/advisories/27097
- http://www.vupen.com/english/advisories/2008/2362
- http://www.vupen.com/english/advisories/2007/2759
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9984
- http://secunia.com/advisories/31489
- http://www.redhat.com/support/errata/RHSA-2007-1003.html
- http://secunia.com/advisories/31531
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:193
- http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability
- http://secunia.com/advisories/30220
- https://issues.rpath.com/browse/RPL-1633
- http://www.vupen.com/english/advisories/2007/4010
- http://www.securityfocus.com/archive/1/485936/100/0/threaded
- http://secunia.com/advisories/27770
- http://lists.vmware.com/pipermail/security-announce/2008/000002.html
- http://secunia.com/advisories/26411
- https://nvd.nist.gov/vuln/detail/CVE-2007-3108