The vulnerability of the Montgomery quadradic multiplication algorithm implementation in OpenSSL libraries is related to an error in integer transfer on the x86_64 platform, which allows an attacker to gain unauthorized access to sensitive information.

🗓️ 22 Jun 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

A vulnerability in Open SSL Montgomery multiplication on x86 platform allows remote attackers to access sensitive data.

Reporter	Title	Published	Views	Family All 322
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Financial Transaction Manager for Digital Payments	2 Oct 201819:55	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in OpenSSL shipped with IBM Tivoli Network Manager IP Edition(CVE-2016-7055, CVE-2017-3731, CVE-2017-3732)	17 Jun 201815:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server affects Netezza Performance Portal	18 Oct 201903:36	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere DataPower Appliances is affected by multiple issues	11 Sep 201813:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Rational Application Developer for WebSphere Software	4 Oct 201818:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus, IBM App Connect Enterpise v11 and WebSphere Message Broker	23 Mar 202020:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple vulnerabilities	2 Jul 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect Rational Reporting for Development Intelligence	17 Jun 201805:22	–	ibm
IBM Security Bulletins	Security Bulletin : IBM Storwize V7000 Unified is affected by multiple GSKit vulnerabilities in GPFS	17 Oct 201817:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GSKit affect IBM Spectrum Scale used by DB2® pureScale™ (CVE-2018-1431, CVE-2018-1447, CVE-2017-3732, CVE-2016-0705)	19 Sep 201819:50	–	ibm

Vulners

Node

novell suse_enterprise_storageMatch4

OR

novell suse_linux_enterprise_module_for_web_scriptingMatch12

OR

novell suse_linux_enterprise_module_for_basesystemMatch15

OR

novell suse_linux_enterprise_module_for_legacy_softwareMatch15

OR

novell suse_linux_enterprise_module_for_containersMatch12

OR

red_hat jboss_enterprise_application_platformMatch6

OR

openssl opensslRange<1.1.0k

OR

novell opensuse_leapMatch42.2

OR

novell opensuse_leapMatch42.3

OR

novell opensuse_leapMatch42.1

OR

novell opensuse_leapMatch15.0

OR

novell suse_linux_enterprise_serverMatch12-ltss

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch12-ltss

OR

novell suse_linux_enterprise_serverMatch11-security

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch11-security

Source	Link
suse	www.suse.com/security/cve/CVE-2017-3732/
access	www.access.redhat.com/security/cve/CVE-2017-3732
openssl	www.openssl.org/news/secadv/20170126.txt
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-3732
security-tracker	www.security-tracker.debian.org/tracker/CVE-2017-3732
web	www.web.nvd.nist.gov/view/vuln/detail

22 Jun 2020 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 35.9

CVSS 27.1

EPSS0.15934

Open SSL library Montgomery multiplication arithmetic error x86 platform remote attacker unauthorized access sensitive data