CVE - CVE-2016-7055

CVE-ID
CVE-2016-7055	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:94242 URL:http://www.securityfocus.com/bid/94242 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM:https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03752en_us CONFIRM:https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us CONFIRM:https://www.openssl.org/news/secadv/20161110.txt CONFIRM:https://www.tenable.com/security/tns-2017-04 FREEBSD:FreeBSD-SA-17:02 URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc GENTOO:GLSA-201702-07 URL:https://security.gentoo.org/glsa/201702-07 MISC:https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html REDHAT:RHSA-2018:2185 URL:https://access.redhat.com/errata/RHSA-2018:2185 REDHAT:RHSA-2018:2186 URL:https://access.redhat.com/errata/RHSA-2018:2186 REDHAT:RHSA-2018:2187 URL:https://access.redhat.com/errata/RHSA-2018:2187 SECTRACK:1037261 URL:http://www.securitytracker.com/id/1037261
Assigning CNA
MITRE Corporation
Date Record Created
20160823	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20160823)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)