Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8618

Опубликовано: 27 янв. 2016
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:golang:go:1.5:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:1.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.02627
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 10 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

redhat
больше 10 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

CVSS3: 7.5
debian
больше 10 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before ...

CVSS3: 7.5
github
больше 4 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

suse-cvrf
около 10 лет назад

Security update for go

EPSS

Процентиль: 84%
0.02627
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200