CVE-2015-7744

2016-01-2200:00:00

ubuntu.com

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

82.0%

JSON

wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults
associated with the Chinese Remainder Theorem (CRT) process when allowing
ephemeral key exchange without low memory optimizations on a server, which
makes it easier for remote attackers to obtain private RSA keys by
capturing TLS handshakes, aka a Lenstra attack.

Notes

Author	Note
tyhicks	affects MySQL 5.5.45 and earlier, 5.6.26 and earlier

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchmariadb-5.5< 5.5.46-1ubuntu0.14.04.2UNKNOWN
ubuntu12.04noarchmysql-5.5< 5.5.46-0ubuntu0.12.04.2UNKNOWN
ubuntu14.04noarchmysql-5.5< 5.5.46-0ubuntu0.14.04.2UNKNOWN
ubuntu14.04noarchmysql-5.6< 5.6.27-0ubuntu0.14.04.1UNKNOWN
ubuntu15.04noarchmysql-5.6< 5.6.27-0ubuntu0.15.04.1UNKNOWN
ubuntu15.10noarchmysql-5.6< 5.6.27-0ubuntu1UNKNOWN
ubuntu16.04noarchpercona-server-5.6< anyUNKNOWN
ubuntu16.04noarchpercona-xtradb-cluster-5.6< 5.6.34-26.19-0ubuntu0.16.04.1UNKNOWN
ubuntu16.10noarchpercona-xtradb-cluster-5.6< 5.6.34-26.19-0ubuntu0.16.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	mariadb-5.5	< 5.5.46-1ubuntu0.14.04.2	UNKNOWN
ubuntu	12.04	noarch	mysql-5.5	< 5.5.46-0ubuntu0.12.04.2	UNKNOWN
ubuntu	14.04	noarch	mysql-5.5	< 5.5.46-0ubuntu0.14.04.2	UNKNOWN
ubuntu	14.04	noarch	mysql-5.6	< 5.6.27-0ubuntu0.14.04.1	UNKNOWN
ubuntu	15.04	noarch	mysql-5.6	< 5.6.27-0ubuntu0.15.04.1	UNKNOWN
ubuntu	15.10	noarch	mysql-5.6	< 5.6.27-0ubuntu1	UNKNOWN
ubuntu	16.04	noarch	percona-server-5.6	< any	UNKNOWN
ubuntu	16.04	noarch	percona-xtradb-cluster-5.6	< 5.6.34-26.19-0ubuntu0.16.04.1	UNKNOWN
ubuntu	16.10	noarch	percona-xtradb-cluster-5.6	< 5.6.34-26.19-0ubuntu0.16.10.1	UNKNOWN