mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
73 lines
2.2 KiB
JSON
73 lines
2.2 KiB
JSON
{
|
|
"CVE_data_meta" : {
|
|
"ASSIGNER" : "cve@mitre.org",
|
|
"ID" : "CVE-2015-5738",
|
|
"STATE" : "PUBLIC"
|
|
},
|
|
"affects" : {
|
|
"vendor" : {
|
|
"vendor_data" : [
|
|
{
|
|
"product" : {
|
|
"product_data" : [
|
|
{
|
|
"product_name" : "n/a",
|
|
"version" : {
|
|
"version_data" : [
|
|
{
|
|
"version_value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format" : "MITRE",
|
|
"data_type" : "CVE",
|
|
"data_version" : "4.0",
|
|
"description" : {
|
|
"description_data" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack."
|
|
}
|
|
]
|
|
},
|
|
"problemtype" : {
|
|
"problemtype_data" : [
|
|
{
|
|
"description" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references" : {
|
|
"reference_data" : [
|
|
{
|
|
"name" : "https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf",
|
|
"refsource" : "MISC",
|
|
"url" : "https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf"
|
|
},
|
|
{
|
|
"name" : "http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions"
|
|
},
|
|
{
|
|
"name" : "https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html"
|
|
}
|
|
]
|
|
}
|
|
}
|