Lucene search
HistoryJul 01, 2015 - 2:59 p.m.
CVE-2015-2141
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.4%
The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain private keys via a timing attack.
Affected configurations
Node
cryptoppcrypto\+\+_libraryMatch5.6.2
Node
opensuseopensuseMatch13.1
ORopensuseopensuseMatch13.2
Related
archlinux
archlinux
crypto++: private key recovery
2015-07-24 00:00:00
nessus
nessus
Fedora 22 : cryptopp-5.6.2-9.fc22 (2015-10914)
2015-07-16 00:00:00
Fedora 21 : cryptopp-5.6.2-9.fc21 (2015-10911)
2015-07-16 00:00:00
Debian DLA-262-1 : libcrypto++ security update
2015-07-01 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0317)
2015-10-15 00:00:00
Fedora Update for cryptopp FEDORA-2015-10914
2015-07-16 00:00:00
Debian: Security Advisory (DSA-3296-1)
2015-06-28 00:00:00
ubuntucve
ubuntucve
CVE-2015-2141
2015-07-01 00:00:00
cvelist
cvelist
CVE-2015-2141
2015-07-01 14:00:00
debian
debian
[SECURITY] [DLA 262-1] libcrypto++ security update
2015-06-30 20:47:22
[SECURITY] [DSA 3296-1] libcrypto++ security update
2015-06-29 08:46:27
osv
osv
libcrypto++ - security update
2015-06-30 00:00:00
cve
cve
CVE-2015-2141
2015-07-01 14:59:06
fedora
fedora
[SECURITY] Fedora 21 Update: cryptopp-5.6.2-9.fc21
2015-07-16 02:37:03
[SECURITY] Fedora 22 Update: cryptopp-5.6.2-9.fc22
2015-07-16 02:37:42
ibm
ibm
debiancve
debiancve
CVE-2015-2141
2015-07-01 14:59:06
securityvulns
securityvulns
[SECURITY] [DSA 3296-1] libcrypto++ security update
2015-07-05 00:00:00
libcrypto++ timing attacks
2015-07-05 00:00:00
mageia
mageia
Updated libcryptopp package fixes security vulnerability
2015-08-21 21:54:52
prion
prion
Code injection
2015-07-01 14:59:00
freebsd
freebsd
cryptopp -- multiple vulnerabilities
2015-02-27 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.4%
Related for NVD:CVE-2015-2141