Read the docs
TI-2017-03677 Aliases CVE-2017-5681GHSA-gx5q-m9m6-jf7v

The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL…

Priority LOW 36Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.

Why it matters now

EPSS 0.01416 72nd percentileScored 2026-11-07
Fix Fixed Intel Quick Assist Technology (Intel): v0.5.19

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
IntelIntel Quick Assist Technologybefore v0.5.19v0.5.19Patch availableCNA
  • Intel Quick Assist Technology VendorIntel Affected before v0.5.19 Fixed in v0.5.19 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:intel:quickassist_technology_engine:0.5.18:*:*:*:*:*:*:*0.5.18VulnerableIntel
  • cpe:2.3:a:intel:quickassist_technology_engine:0.5.18:*:*:*:*:*:*:* Versions 0.5.18 Vulnerable ·Intel

Remediation

  • Fix · CNA Intel Quick Assist Technology (Intel) Fixed in v0.5.19

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-5681
  2. 2026-10-03 Alias added: GHSA-gx5q-m9m6-jf7v

References

Patch 1

  • TI-2022-21291 Buffer overflow in Intel QAT Engine for OpenSSL CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences