CVE-2017-15361
Le 16 octobre 2017, des chercheurs de l'université Masaryk (République Tchèque), ont publié un article sur la découverte d'une vulnérabilité dans la bibliothèque RSA développée par Infineon. Leurs travaux seront présentés le 2 novembre 2017 à la conférence "ACM Conference on Computer and Communcations Security". D'après les chercheurs, un problème dans la génération du couple clé privée/publique permet de retrouver la clé privée à partir de la clé publique uniquement. Cette attaque est applicable en pratique et peu coûteuse (76\$ pour une clé de 1024 bits et 40300\$ pour une clé de 2048 bits). Les systèmes affectés sont nombreux et comptent notamment des TPMs, des clés de chiffrement Bitlocker, des certificats TLS, des clés PGP ou SSH ou encore des cartes à puce.
EPSS 9.83% · 95.1th percentile
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SolarWinds | Platform | |
| N/A | N/A |
Timeline
- Oct 16, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Mar 7, 2023 EPSS Score
- Dec 17, 2024 EPSS Score
- Mar 18, 2025 EPSS Score
- Mar 19, 2025 EPSS Score
- Mar 24, 2025 EPSS Score
- Mar 25, 2025 EPSS Score
- Mar 28, 2025 EPSS Score
- Mar 29, 2025 EPSS Score
- Apr 12, 2025 EPSS Score
- May 1, 2025 EPSS Score
References
- https://cert.ssi.gouv.fr/avis/CERTFR-2018-AVI-095/ advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-470231.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-168644.pdf advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf advisory
- https://cert.ssi.gouv.fr/avis/CERTFR-2018-AVI-432/ advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00119.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00125.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00162.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00181.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00149.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00148.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00141.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00173.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00177.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00165.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00170.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00172.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00142.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00176.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00143.html advisory
…and 3 more