CVE-2015-5738: Infoleak
The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5738?
CVE-2015-5738 is considered critical due to the potential exposure of private RSA keys through a side-channel attack.
How do I fix CVE-2015-5738?
To mitigate CVE-2015-5738, upgrade to a version of the Cavium Software Development Kit that is not vulnerable to the issue.
What systems are affected by CVE-2015-5738?
CVE-2015-5738 affects the Cavium Software Development Kit 2.x running on OCTEON II CN6xxx hardware, specifically in TLS implementations.
What type of attack is associated with CVE-2015-5738?
CVE-2015-5738 is associated with a Lenstra side-channel attack that can compromise private RSA keys.
Is CVE-2015-5738 relevant for all versions of the Marvell SDK?
No, CVE-2015-5738 specifically affects the Marvell Software Development Kit version 2.0.