Read the docs
TI-2016-06065 Aliases CVE-2016-7055GHSA-hxpw-pxmm-q49r

There is a carry propagating bug in the Broadwell-specific Montgomery multiplication…

Priority MEDIUM 42Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 3 fixed, 3 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.

Why it matters now

EPSS 0.14225 96th percentileScored 2026-11-07
Fix Partial Red Hat: 3 advisoriesRed Hat: 3 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*1.0.2 to before 1.0.2k; 1.1.0 to before 1.1.0cVulnerableOpenSSL
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*4.0.0 – 4.1.2VulnerableNodeJS
cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*4.2.0 to before 4.7.3VulnerableNodeJS
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*6.0.0 – 6.8.1VulnerableNodeJS
cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*6.9.0 to before 6.9.5VulnerableNodeJS
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*7.0.0 to before 7.5.0VulnerableNodeJS
  • cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 1.0.2 to before 1.0.2k; 1.1.0 to before 1.1.0c Vulnerable ·OpenSSL
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 4.0.0 – 4.1.2 Vulnerable ·NodeJS
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* Versions 4.2.0 to before 4.7.3 Vulnerable ·NodeJS
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 6.0.0 – 6.8.1 Vulnerable ·NodeJS
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:* Versions 6.9.0 to before 6.9.5 Vulnerable ·NodeJS
  • cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 7.0.0 to before 7.5.0 Vulnerable ·NodeJS

Remediation

Red Hat 3 advisories

  • RHSA-2018:2186 Released 2018-07-12 · Red Hat rating Moderate
    Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 6 security update
    • Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-apache-commons-daemon-1.1.0-1.redhat_2.1.jbcs.el6, jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6, jbcs-httpd24-apr-1.6.3-14.jbcs.el6 +34
  • RHSA-2018:2185 Released 2018-07-12 · Red Hat rating Moderate
    Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 7 security update
    • Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-apache-commons-daemon-1.1.0-1.redhat_2.1.jbcs.el7, jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7, jbcs-httpd24-apr-1.6.3-14.jbcs.el7 +34
  • RHSA-2018:2187 Released 2018-07-12 · Red Hat rating Moderate
    Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update
    • Red Hat JBoss Core Services

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat JBoss Core ServicesAffectedNo fix planned: Will not fix
Red Hat JBoss Enterprise Application Platform 6AffectedNo fix planned: Will not fix
Red Hat JBoss Enterprise Web Server 2AffectedNo fix planned: Will not fix
Red Hat JBoss Core ServicesFixed RHSA-2018:2187
Red Hat JBoss Core Services on RHEL 6 ServerFixed RHSA-2018:2186
Red Hat JBoss Core Services on RHEL 7 ServerFixed RHSA-2018:2185
Not affected: 6 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat JBoss Enterprise Web Server 1
  • Red Hat JBoss Enterprise Web Server 3
  • Red Hat JBoss Web Server 3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-7055
  2. 2026-10-03 Alias added: GHSA-hxpw-pxmm-q49r

References

Patch 4

Advisory 9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences