4.3

CVE-2013-5915

The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Polarssl ≫ Polarssl Version <= 1.2.8
Polarssl ≫ Polarssl Version 0.10.0
Polarssl ≫ Polarssl Version 0.10.1
Polarssl ≫ Polarssl Version 0.11.0
Polarssl ≫ Polarssl Version 0.11.1
Polarssl ≫ Polarssl Version 0.12.0
Polarssl ≫ Polarssl Version 0.12.1
Polarssl ≫ Polarssl Version 0.13.1
Polarssl ≫ Polarssl Version 0.14.0
Polarssl ≫ Polarssl Version 0.14.2
Polarssl ≫ Polarssl Version 0.14.3
Polarssl ≫ Polarssl Version 0.99 Update pre1
Polarssl ≫ Polarssl Version 0.99 Update pre3
Polarssl ≫ Polarssl Version 0.99 Update pre4
Polarssl ≫ Polarssl Version 0.99 Update pre5
Polarssl ≫ Polarssl Version 1.0.0
Polarssl ≫ Polarssl Version 1.1.0
Polarssl ≫ Polarssl Version 1.1.0 Update rc0
Polarssl ≫ Polarssl Version 1.1.0 Update rc1
Polarssl ≫ Polarssl Version 1.1.1
Polarssl ≫ Polarssl Version 1.1.2
Polarssl ≫ Polarssl Version 1.1.3
Polarssl ≫ Polarssl Version 1.1.4
Polarssl ≫ Polarssl Version 1.1.5
Polarssl ≫ Polarssl Version 1.1.6
Polarssl ≫ Polarssl Version 1.1.8
Polarssl ≫ Polarssl Version 1.2.0
Polarssl ≫ Polarssl Version 1.2.1
Polarssl ≫ Polarssl Version 1.2.2
Polarssl ≫ Polarssl Version 1.2.3
Polarssl ≫ Polarssl Version 1.2.4
Polarssl ≫ Polarssl Version 1.2.5
Polarssl ≫ Polarssl Version 1.2.6
Polarssl ≫ Polarssl Version 1.2.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.14% 0.797
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.debian.org/security/2013/dsa-2782
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/118758.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119014.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119018.html
http://osvdb.org/98049
http://secunia.com/advisories/55084
Vendor Advisory
http://www.securityfocus.com/bid/62771
https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-05
Vendor Advisory