CVE-2015-8618 Incorrect calculation affecting RSA computations in math/big
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stdlib(Go) | >= 1.5.0-0, < 1.5.3 | 1.5.3 |
| openSUSE leap | = 42.1 | No fix listed |
| golang go | = 1.5 | No fix listed |
| golang go | = 1.5.1 | No fix listed |
| golang go | = 1.5.2 | No fix listed |
References
- go.dev patch
- go.googlesource.com patch
- go.googlesource.com patch
- go.dev patch
- go.dev issue-tracking
- groups.google.com
- FEDORA-2016-5a073cbd93 vendor-advisory
- FEDORA-2016-2dcc094217 vendor-advisory
- openSUSE-SU-2016:1331 vendor-advisory
- [oss-security] 20151221 CVE request for math/big.Exp mailing-list
- [oss-security] 20151222 Re: CVE request for math/big.Exp mailing-list
- [oss-security] 20160113 [security] Go security release v1.5.3 mailing-list
- github.com patch
- go-review.googlesource.com
- [golang-announce] 20160113 [security] Go 1.5.3 is released mailing-list