CVE-2013-5915

The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing…

published October 4, 2013

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02143 · 81.9th percentile
Published
2013-10-04T17:00Z
EPSS history
Timeline
  • 04 OCT 17:00Z
    The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing…
    cvelistv5