4.3

CVE-2013-5915

The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.

Data is provided by the National Vulnerability Database (NVD)
Polarssl ≫ Polarssl Version <= 1.2.8
Polarssl ≫ Polarssl Version0.10.0
Polarssl ≫ Polarssl Version0.10.1
Polarssl ≫ Polarssl Version0.11.0
Polarssl ≫ Polarssl Version0.11.1
Polarssl ≫ Polarssl Version0.12.0
Polarssl ≫ Polarssl Version0.12.1
Polarssl ≫ Polarssl Version0.13.1
Polarssl ≫ Polarssl Version0.14.0
Polarssl ≫ Polarssl Version0.14.2
Polarssl ≫ Polarssl Version0.14.3
Polarssl ≫ Polarssl Version0.99 Updatepre1
Polarssl ≫ Polarssl Version0.99 Updatepre3
Polarssl ≫ Polarssl Version0.99 Updatepre4
Polarssl ≫ Polarssl Version0.99 Updatepre5
Polarssl ≫ Polarssl Version1.0.0
Polarssl ≫ Polarssl Version1.1.0
Polarssl ≫ Polarssl Version1.1.0 Updaterc0
Polarssl ≫ Polarssl Version1.1.0 Updaterc1
Polarssl ≫ Polarssl Version1.1.1
Polarssl ≫ Polarssl Version1.1.2
Polarssl ≫ Polarssl Version1.1.3
Polarssl ≫ Polarssl Version1.1.4
Polarssl ≫ Polarssl Version1.1.5
Polarssl ≫ Polarssl Version1.1.6
Polarssl ≫ Polarssl Version1.1.8
Polarssl ≫ Polarssl Version1.2.0
Polarssl ≫ Polarssl Version1.2.1
Polarssl ≫ Polarssl Version1.2.2
Polarssl ≫ Polarssl Version1.2.3
Polarssl ≫ Polarssl Version1.2.4
Polarssl ≫ Polarssl Version1.2.5
Polarssl ≫ Polarssl Version1.2.6
Polarssl ≫ Polarssl Version1.2.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.69% 0.694
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N