There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024,…
中危 CVSS 5.3
摘要
There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also application…
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
- :
- :
- :
- :
- :
- :
数据来源
- NVD DATABASE
原始链接
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html Mailing List
- http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html Third Party Advisory
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98
- https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html Mailing List
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/
- https://seclists.org/bugtraq/2019/Dec/39 Mailing List
- https://seclists.org/bugtraq/2019/Dec/46 Mailing List
- https://security.gentoo.org/glsa/202004-10 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191210-0001/ Third Party Advisory
- https://usn.ubuntu.com/4376-1/ Third Party Advisory
- https://usn.ubuntu.com/4504-1/ Third Party Advisory
- https://www.debian.org/security/2019/dsa-4594 Third Party Advisory
- https://www.debian.org/security/2021/dsa-4855 Third Party Advisory
- https://www.openssl.org/news/secadv/20191206.txt Vendor Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html Patch
- https://www.oracle.com/security-alerts/cpujan2021.html Patch
- https://www.oracle.com/security-alerts/cpujul2020.html Patch
- https://www.tenable.com/security/tns-2019-09 Third Party Advisory
- https://www.tenable.com/security/tns-2020-03 Third Party Advisory
- https://www.tenable.com/security/tns-2020-11 Third Party Advisory
- https://www.tenable.com/security/tns-2021-10 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html Mailing List
- http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html Third Party Advisory
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98
- https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html Mailing List
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/
- https://seclists.org/bugtraq/2019/Dec/39 Mailing List
- https://seclists.org/bugtraq/2019/Dec/46 Mailing List
- https://security.gentoo.org/glsa/202004-10 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191210-0001/ Third Party Advisory
- https://usn.ubuntu.com/4376-1/ Third Party Advisory
- https://usn.ubuntu.com/4504-1/ Third Party Advisory
- https://www.debian.org/security/2019/dsa-4594 Third Party Advisory
- https://www.debian.org/security/2021/dsa-4855 Third Party Advisory
- https://www.openssl.org/news/secadv/20191206.txt Vendor Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html Patch
- https://www.oracle.com/security-alerts/cpujan2021.html Patch
- https://www.oracle.com/security-alerts/cpujul2020.html Patch
- https://www.tenable.com/security/tns-2019-09 Third Party Advisory
- https://www.tenable.com/security/tns-2020-03 Third Party Advisory
- https://www.tenable.com/security/tns-2020-11 Third Party Advisory
- https://www.tenable.com/security/tns-2021-10 Third Party Advisory
时间线
- nvd_ingest NVD