CVE-2016-6882 | BDVDB-2026-82250 Detail

Description#

MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2016/08/19/7
https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf
https://access.redhat.com/blogs/766093/posts/1976703
https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md#validation-of-rsa-signature-creation
http://www.securityfocus.com/bid/91488

Exploit#

No public exploit known

History#

Version 12017-03-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.