mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 18:52:12 +00:00
18 lines
701 B
Markdown
18 lines
701 B
Markdown
|
### [CVE-2015-8618](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8618)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- https://github.com/golang/go/issues/13515
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/Big5-sec/Security-challenges
|
||
|
|
|