Security Advisory

CVE-2007-3108

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-08-08 01:11:00

Last updated 2024-08-07 14:05:28

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

← Browse all CVEs View on cve.org ↗