CVE-2016-6882: Infoleak
Published Mar 3, 2017
·Updated
MatrixSSL before 3.8.7, when the DHERSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack.
Affected Software
1 affected component
MatrixSSL MatrixSSL<=3.8.6
Remediation
Patch Available
Event History
Mar 3, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-6882?
CVE-2016-6882 is considered a high severity vulnerability due to its potential to expose RSA private key information.
2
How do I fix CVE-2016-6882?
To fix CVE-2016-6882, upgrade MatrixSSL to version 3.8.7 or later.
3
What type of attack does CVE-2016-6882 involve?
CVE-2016-6882 involves a Lenstra side-channel attack that aims to extract RSA private key information.
4
Which versions of MatrixSSL are affected by CVE-2016-6882?
MatrixSSL versions prior to 3.8.7 are affected by CVE-2016-6882.
5
Can CVE-2016-6882 affect my RSA based applications?
Yes, CVE-2016-6882 can compromise the security of RSA based applications using vulnerable versions of MatrixSSL.