---
cve: "CVE-2015-3193"
severity: "LOW"
cvss: 3.1
epss: "25.1%"
vendor: "n/a"
kev: false
exploited: false
published: "2015-12-06 20:59:02"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-13T11:17:45+02:00"
---

# CVE-2015-3193

> 3.1 LOW

## Beschreibung

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.

## Referenzen

- <http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl>
- <https://kb.isc.org/article/AA-01438>
- <http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html>
- <https://blog.fuzzing-project.org/31-Fuzzing-Math-miscalculations-in-OpenSSLs-BN_mod_exp-CVE-2015-3193.html>
- <http://www.fortiguard.com/advisory/openssl-advisory-december-2015>
- <http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583>
- <http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html>
- <https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100>
- <http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.539966>
- <http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761>
- <http://www.ubuntu.com/usn/USN-2830-1>
- <http://www.securityfocus.com/bid/78705>
- <http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html>
- <http://www.securityfocus.com/bid/91787>
- <https://bugzilla.redhat.com/show_bug.cgi?id=1288317>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2015-3193) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_