| Package | Affected versions | Patched versions |
|---|---|---|
| openssl | ≤ 0.9.8e |
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free