Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2015-3193: OpenSSL 1.0.2 may expose DH keys on 64‑bit Linux

CVE-2015-3193 · published 10 years ago

Summary

Versions of OpenSSL 1.0.2 prior to 1.0.2e on 64‑bit systems calculate certain encryption steps incorrectly, which can let remote attackers recover private keys when Diffie‑Hellman or DHE ciphers are used. The flaw can affect software that bundles this OpenSSL version, such as Node.js and Ubuntu Linux distributions. Fix the issue by updating OpenSSL to 1.0.2e or later, or by installing newer versions of the affected software packages.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
openssl	openssl	1.0.2 1.0.2a 1.0.2b 1.0.2c 1.0.2d `cpe:2.3:a:openssl:openssl:1.0.2:::::::*`
nodejs	node.js	>= 4.0.0, <= 4.1.2 >= 4.2.0, < 4.2.3 >= 5.0.0, < 5.1.1 `cpe:2.3:a:nodejs:node.js:::::-:::*`
canonical	ubuntu_linux	12.04 14.04 15.04 15.10 `cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::`

Original advisory text

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.

References

http://fortiguard.com/advisory/openssl-advisory-december-2015 Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 Third Party Advisory
http://openssl.org/news/secadv/20151203.txt Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20... Third Party Advisory
http://www.fortiguard.com/advisory/openssl-advisory-december-2015 Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html Patch Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html Patch Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Patch Third Party Advisory
http://www.securityfocus.com/bid/78705 Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/91787 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1034294 Third Party Advisory VDB Entry
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slack... Third Party Advisory
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slack... Third Party Advisory
http://www.ubuntu.com/usn/USN-2830-1 Third Party Advisory
https://blog.fuzzing-project.org/31-Fuzzing-Math-miscalculations-in-OpenSSLs-BN_... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1288317 Issue Tracking Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d73cc256c8e256c32ed9594561...
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c... Third Party Advisory
https://kb.isc.org/article/AA-01438 Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

25% chance of attack within 30 days

Type

CWE-200Information Exposure

Timeline

Published6 Dec 2015

Updated29 Sep 2026

First seen29 Sep 2026

Sources

CVE-2015-3193 · NVD

Track software like this

Free during beta