CVE-2013-5915 REJECTED

The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.

EPSS 0.69% · 71.6th percentile

Risk Scores

EPSS Score
0.69%
71.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSpolarssl0, 1.2.8-2, 1.3.1-2

Timeline

References

Open in Interactive Console →