CVE-2007-3108
Publication date 7 August 2007
Last updated 24 July 2024
Ubuntu priority
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
From the Ubuntu Security Team
It was discovered that OpenSSL did not correctly perform Montgomery multiplications. Local attackers might be able to reconstruct RSA private keys by examining another user's OpenSSL processes.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| openssl | ||
| openssl097 | ||