Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8618

Опубликовано: 27 янв. 2016
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:golang:go:1.5:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:1.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 72%
0.00735
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 10 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

redhat
около 10 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

CVSS3: 7.5
debian
около 10 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before ...

CVSS3: 7.5
github
больше 3 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

suse-cvrf
больше 9 лет назад

Security update for go

EPSS

Процентиль: 72%
0.00735
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200