Vulnerability Description
wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wolfssl | Wolfssl | < 3.6.8 |
| Opensuse | Leap | 42.1 |
| Opensuse | Opensuse | 13.1 |
| Mariadb | Mariadb | >= 5.5.0, < 5.5.46 |
References
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.htmlMailing ListThird Party Advisory
- http://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.htmlRelease NotesVendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlVendor Advisory
- http://www.securitytracker.com/id/1034708Broken LinkThird Party AdvisoryVDB Entry
- https://people.redhat.com/~fweimer/rsa-crt-leaks.pdfExploitThird Party Advisory
- https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-fExploitThird Party Advisory
- https://wolfssl.com/wolfSSL/Blog/Entries/2015/9/17_Two_Vulnerabilities_Recently_Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.htmlMailing ListThird Party Advisory
- http://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.htmlRelease NotesVendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlVendor Advisory
- http://www.securitytracker.com/id/1034708Broken LinkThird Party AdvisoryVDB Entry
FAQ
What is CVE-2015-7744?
CVE-2015-7744 is a vulnerability with a CVSS score of 5.9 (MEDIUM). wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations...
How severe is CVE-2015-7744?
CVE-2015-7744 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-7744?
Check the references section above for vendor advisories and patch information. Affected products include: Wolfssl Wolfssl, Opensuse Leap, Opensuse Opensuse, Mariadb Mariadb.