DSA-4594: -1 openssl1.0 -- security update
Published Dec 27, 2019
·Updated
Guido Vranken discovered an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli.
Affected Software
2 affected components
debian/openssl1.0
debian/openssl1.0
Event History
Dec 27, 2019
Advisory Published
12:00 AM
Frequently Asked Questions
1
Which systems are exposed to this issue?
Systems using the Debian openssl1.0 package are relevant. The affected code is the x64_64 Montgomery squaring procedure used during exponentiation with 512-bit moduli.
2
What conditions are required to trigger the overflow?
The overflow occurs in the x64_64 Montgomery squaring procedure when it is used for exponentiation with 512-bit moduli. The provided information does not specify an attacker access path, affected default configuration, or workaround.