The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Dec 16, 2020 | Dec 6, 2015 |
| Cisco Apic | — | Upgrade to the latest version of Cisco APIC to resolve this vulnerability. | May 11, 2026 | Dec 4, 2015 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Dec 6, 2015 |
| Freebsd | — | Upgrade mingw32-opensslUpgrade linux-c6-opensslUpgrade bind910Upgrade FreeBSDUpgrade bind9-develUpgrade bind99Upgrade openssl | Dec 10, 2025 | Dec 16, 2015 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 30, 2017 | Dec 6, 2015 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Dec 8, 2015 | Dec 6, 2015 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.14-0.175.3.28.0.2.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.12-0.175.3.28.0.2.0 on Solaris 11.3 | Feb 6, 2018 | Dec 6, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R1.1Update Pulse Connect Secure to version 8.0R15Update Pulse Connect Secure to version 8.1R8 | Oct 28, 2020 | Dec 6, 2015 |
| Suse | — | Upgrade libfreebl3Upgrade firefox-glib2-toolsUpgrade libfirefox-gio-2_0-0Upgrade firefox-libpango-1_0-0Upgrade nodejs8Upgrade libopenssl-1_0_0-develUpgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-thaiUpgrade libopenssl1_1Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefoxUpgrade mozilla-nspr-32bitUpgrade firefox-glib2-langUpgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-toolsUpgrade libopenssl1_1-hmacUpgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade libfirefox-glib-2_0-0Upgrade libopenssl-1_1-develUpgrade libsoftokn3Upgrade mozilla-nss-toolsUpgrade libopenssl-1_1-devel-32bitUpgrade mozilla-nssUpgrade libopenssl1_0_0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade openssl-1_0_0Upgrade nodejs8-docsUpgrade nodejs8-develUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade libfreebl3-32bitUpgrade mozilla-nsprUpgrade mozilla-nss-certsUpgrade firefox-gtk3-immodule-ximUpgrade openssl-1_1Upgrade libopenssl10Upgrade firefox-gtk3-immodule-multipressUpgrade npm8Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gio-branding-upstreamUpgrade libopenssl-develUpgrade libopenssl1_1-hmac-32bitUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-langUpgrade firefox-libatk-1_0-0Upgrade libsoftokn3-32bitUpgrade firefox-libgtk-3-0Upgrade firefox-libharfbuzz0Upgrade libfirefox-gobject-2_0-0Upgrade firefox-atk-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade libopenssl1_1-32bitUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libffi4Upgrade firefox-gtk3-dataUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nspr-develUpgrade firefox-libcairo-gobject2Upgrade opensslUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-immodule-amharicUpgrade MozillaFirefox-translations-commonUpgrade firefox-libffi7 | May 20, 2018 | Dec 6, 2015 |
| Ubuntu | — | Upgrade libssl1.0.0 | Dec 7, 2015 | Dec 6, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub