CVE-2015-5738 The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remo...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| marvell software development kit | = 2.0 | No fix listed |
| f5 traffix signaling delivery controller | >= 3.3.2, <= 3.5.1 | No fix listed |
| f5 traffix signaling delivery controller | >= 4.0.0, <= 4.4.0 | No fix listed |
References
- fortiguard.com broken-link
- people.redhat.com technical-description third-party-advisory
- support.f5.com third-party-advisory
- Debian Security Tracker CVE-2015-5738 vendor-advisory