EUVD-2015-8495

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Improper carry propagation in Montgomery code in Go before 1.5.3 allows attackers to obtain RSA keys

Reporter	Title	Published	Views	Family All 37
FreeBSD	go -- information disclosure vulnerability	13 Jan 201600:00	–	freebsd
ArchLinux	go: information leakage	16 Jan 201600:00	–	archlinux
ArchLinux	docker: information leakage	17 Jan 201600:00	–	archlinux
ArchLinux	go-ipfs: information leakage	17 Jan 201600:00	–	archlinux
ArchLinux	hub: information leakage	17 Jan 201600:00	–	archlinux
ArchLinux	keybase: information leakage	17 Jan 201600:00	–	archlinux
ArchLinux	syncthing: information leakage	17 Jan 201600:00	–	archlinux
CNVD	Google Go math/big library private key acquisition vulnerability	30 Jan 201600:00	–	cnvd
CVE	CVE-2015-8618	27 Jan 201620:00	–	cve
Cvelist	CVE-2015-8618	27 Jan 201620:00	–	cvelist

[
  {
    "enisaIdVendor": [
      {
        "id": "07cedc75-9394-3059-a1ba-2e7cad48249b",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "b782f2f5-574a-3d0c-845d-2b5947b14a29",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2015-8618.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-January/175642.html
openwall	www.openwall.com/lists/oss-security/2016/01/13/7
go-review	www.go-review.googlesource.com/
groups	www.groups.google.com/forum/
github	www.github.com/golang/go/issues/13515
lists	www.lists.opensuse.org/opensuse-updates/2016-05/msg00077.html
openwall	www.openwall.com/lists/oss-security/2015/12/22/9
openwall	www.openwall.com/lists/oss-security/2015/12/21/6
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-January/176179.html

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 25

EPSS0.00735