CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
82.2%
wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults
associated with the Chinese Remainder Theorem (CRT) process when allowing
ephemeral key exchange without low memory optimizations on a server, which
makes it easier for remote attackers to obtain private RSA keys by
capturing TLS handshakes, aka a Lenstra attack.
Author | Note |
---|---|
tyhicks | affects MySQL 5.5.45 and earlier, 5.6.26 and earlier |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 14.04 | noarch | mariadb-5.5 | < 5.5.46-1ubuntu0.14.04.2 | UNKNOWN |
ubuntu | 12.04 | noarch | mysql-5.5 | < 5.5.46-0ubuntu0.12.04.2 | UNKNOWN |
ubuntu | 14.04 | noarch | mysql-5.5 | < 5.5.46-0ubuntu0.14.04.2 | UNKNOWN |
ubuntu | 14.04 | noarch | mysql-5.6 | < 5.6.27-0ubuntu0.14.04.1 | UNKNOWN |
ubuntu | 15.04 | noarch | mysql-5.6 | < 5.6.27-0ubuntu0.15.04.1 | UNKNOWN |
ubuntu | 15.10 | noarch | mysql-5.6 | < 5.6.27-0ubuntu1 | UNKNOWN |
ubuntu | 16.04 | noarch | percona-server-5.6 | < any | UNKNOWN |
ubuntu | 16.04 | noarch | percona-xtradb-cluster-5.6 | < 5.6.34-26.19-0ubuntu0.16.04.1 | UNKNOWN |
ubuntu | 16.10 | noarch | percona-xtradb-cluster-5.6 | < 5.6.34-26.19-0ubuntu0.16.10.1 | UNKNOWN |
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
82.2%