CVE-2013-5915
The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.
- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- CWE
- CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- polarssl:polarssl
References
- http://lists.fedoraproject.org/pipermail/package-announce/2013-October/118758.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119014.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119018.html
- http://osvdb.org/98049
- http://secunia.com/advisories/55084