Rapid7

vulnerability

Ubuntu: (CVE-2015-7744): mysql-5.5 vulnerability

Severity
3
CVSS
(AV:N/AC:H/Au:N/C:P/I:N/A:N)
Published
Jan 22, 2016
Added
Nov 19, 2024
Modified
Apr 16, 2026

Description

wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.

Solutions

ubuntu-upgrade-mariadb-5-5ubuntu-upgrade-mysql-5-5ubuntu-upgrade-mysql-5-6ubuntu-upgrade-percona-xtradb-cluster-5-6
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.