CVE-2015-5738 | BDVDB-2026-77408 Detail

Description#

The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf
https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html
http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions

Exploit#

No public exploit known

History#

Version 12016-07-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.