Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8618

Опубликовано: 27 янв. 2016
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:golang:go:1.5:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:1.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 86%
0.0263
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 11 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

redhat
почти 11 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

CVSS3: 7.5
debian
почти 11 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before ...

CVSS3: 7.5
github
больше 4 лет назад

The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

CVSS3: 7.5
altlinux
почти 11 лет назад

ALT-PU-2016-1067: package `golang` update to version 1.5.3-alt1

EPSS

Процентиль: 86%
0.0263
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200