PT-2016-3065

Name of the Vulnerable Software and Affected Versions Cavium Software Development Kit SDK versions 2.x Description The issue is related to the RSA-CRT implementation in the Cavium Software Development Kit SDK, which lacks protection of service data. This makes it easier for remote attackers to...

CVE-2015-5738: Exposure of Sensitive Information to an Unauthorized Actor

The RSA-CRT implementation in the Cavium Software Development Kit SDK 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy PFS, makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack...