High severity · published Jul 26, 2016
CVE-2015-5738
The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS),…
7.5
CVSS
2.4%
EPSS
No
On KEV
Description
The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Software Development Kit · Marvell
2.0 · source: NVD
TS
Traffix Signaling Delivery Controller · F5
3.3.2 through 3.5.1; 4.0.0 through 4.4.0 · source: NVD
Affected product
TS
Traffix Signaling Delivery Controller
F5
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5738
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5738
Broken Link
http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions
Technical Description
https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf
Third Party Advisory
https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html
More from Traffix Signaling Delivery Controller
7.8
CVE-2018-14634
Linux Kernel Integer Overflow Vulnerability
8.1
CVE-2018-20836
An issue was discovered in the Linux kernel before 4.20
7.8
CVE-2019-5436
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1
7.8
CVE-2019-9070
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32
7.8
CVE-2019-9077
An issue was discovered in GNU Binutils 2.32