vulnwire
1.2low

CVE-2007-3108

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, w…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
1.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 35%
Public exploits
0
none known

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

Exploit prediction (EPSS)

0.40% probability of exploitation in the next 30 days, higher than 35% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.01.2AV:L/AC:H/Au:N/C:P/I:N/A:N

Classification

Technology feeds
OpenSSL (RSS, critical only)

References

  • support.attachmate.com /techdocs/2374.html · x_refsource_CONFIRM, x_transferred
  • kb.cert.org /vuls/id/RGII-74KLP3 · x_refsource_CONFIRM, x_transferred
  • kb.cert.org /vuls/id/724968 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • secunia.com /advisories/26893 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2008/dsa-1571 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • secunia.com /advisories/27205 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/476341/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/27097 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2008/2362 · vdb-entry, x_refsource_VUPEN, x_transferred
  • vupen.com /english/advisories/2007/2759 · vdb-entry, x_refsource_VUPEN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9984 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/31489 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2007-1003.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/31531 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2007:193 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • bluecoat.com /support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/30220 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • issues.rpath.com /browse/RPL-1633 · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2007/4010 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /archive/1/485936/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/27770 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.vmware.com /pipermail/security-announce/2008/000002.html · mailing-list, x_refsource_MLIST, x_transferred
  • secunia.com /advisories/26411 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • usn.ubuntu.com /522-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • openssl.org /news/patch-CVE-2007-3108.txt · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2008/2361 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/31467 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2007-0964.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • secunia.com /advisories/27870 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2008/2396 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/27330 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/30161 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • gentoo.org /security/en/glsa/glsa-200805-07.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • vmware.com /security/advisories/VMSA-2008-0013.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/28368 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2007-485.htm · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/27078 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • security.gentoo.org /glsa/glsa-200710-06.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • cvs.openssl.org /chngview?cn=16275 · x_refsource_CONFIRM, x_transferred
  • issues.rpath.com /browse/RPL-1613 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/27021
  • redhat.com /support/errata/RHSA-2007-0813.html
  • securityfocus.com /archive/1/486859/100/0/threaded
  • securityfocus.com /bid/25163 · Patch
  • vmware.com /security/advisories/VMSA-2008-0001.html
  • vupen.com /english/advisories/2008/0064

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.