UpHeron
All vulnerabilities

Servers and applications

CVE-2015-3193

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral…

Severity
High 7.5
Published
6 Dec 2015
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
4.2.3, 5.1.1
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 4.0.0 up to 4.1.2
  • From 4.2.0 before 4.2.3
  • From 5.0.0 before 5.1.1
OpenSSLServers and applications · cpe:a:openssl:openssl
  • Version 1.0.2
  • Version 1.0.2a
  • Version 1.0.2b
  • Version 1.0.2c
  • Version 1.0.2d

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-3193
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-3193