The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2…
Priority MEDIUM 54CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.
Why it matters now
EPSS 0.25137 97th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 12
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:* | 1.0.2 | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:* | 1.0.2a | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:* | 1.0.2b | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:* | 1.0.2c | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:* | 1.0.2d | Vulnerable | OpenSSL |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* | 4.0.0 – 4.1.2 | Vulnerable | NodeJS |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* | 4.2.0 to before 4.2.3 | Vulnerable | NodeJS |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* | 5.0.0 to before 5.1.1 | Vulnerable | NodeJS |
| cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* | 12.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* | 14.04 | Vulnerable | Canonical |
- cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:* Versions 1.0.2a Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:* Versions 1.0.2b Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:* Versions 1.0.2c Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:* Versions 1.0.2d Vulnerable ·OpenSSL
- cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 4.0.0 – 4.1.2 Vulnerable ·NodeJS
- cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* Versions 4.2.0 to before 4.2.3 Vulnerable ·NodeJS
- cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 5.0.0 to before 5.1.1 Vulnerable ·NodeJS
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* Versions 12.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
Not affected: 7 products
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat JBoss Enterprise Application Platform 6
- Red Hat JBoss Enterprise Web Server 1
- Red Hat JBoss Enterprise Web Server 2
- Red Hat JBoss Enterprise Web Server 3
Timeline
- 2026-10-02 Threatist record created from CVE-2015-3193
- 2026-10-03 Alias added: GHSA-8m9h-2gxv-h3m7
References
Patch 3
Advisory 14
- 20151204 Multiple Vulnerabilities in OpenSSL (December 2015) Affecting Cisco Products
- https://kb.isc.org/article/AA-01438
- https://blog.fuzzing-project.org/31-Fuzzing-Math-miscalculations-in-OpenSSLs-BN_mod_exp-CVE-2015-3193.html
- http://www.fortiguard.com/advisory/openssl-advisory-december-2015
- SSA:2015-349-04
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100
- SSA:2015-349-01
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
- USN-2830-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1288317
- http://openssl.org/news/secadv/20151203.txt
- http://fortiguard.com/advisory/openssl-advisory-december-2015
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
Sources
- CVE-2015-3193 · CVE Program
- CVE-2015-3193 · NVD
- FIRST EPSS
- GHSA-8m9h-2gxv-h3m7 · GitHub Advisory Database · CC BY 4.0
- CVE-2015-3193 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences