Vulnerability Details : CVE-2007-3108

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
Published 2007-08-08 01:17:00
Updated 2018-10-16 16:47:32
Source Red Hat, Inc.
View at NVD,   CVE.org

Products affected by CVE-2007-3108

Exploit prediction scoring system (EPSS) score for CVE-2007-3108

EPSS FAQ
0.05%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 18 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3108

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
1.2
 LOW AV:L/AC:H/Au:N/C:P/I:N/A:N
1.9
2.9
 NIST

Vendor statements for CVE-2007-3108

  • Red Hat 2007-08-14
    This paper describes a possible side-channel attack that hasn’t been proven outside of a lab environment. In reality many factors would make this harder to exploit. If exploited, a local user could obtain RSA private keys (for example for web sites being run on the server). We have rated this as affecting Red Hat products with moderate security severity. Although the OpenSSL team have produced a patch for this issue, it is non-trivial and will require more testing before we can deploy it in a future update. Our current plan is as follows: - To include a backported fix in an OpenSSL update as part of Enterprise Linux 4.6. This will get testing via beta and give time for more extensive internal and upstream testing - To release an update for OpenSSL for other platforms at the same time as 4.6 is released http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3108

References for CVE-2007-3108

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close