UpHeron
All vulnerabilities

Servers and applications

CVE-2016-7055

There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input…

Severity
Medium 5.9
Published
4 May 2017
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.0.2k, 1.1.0c, 4.7.3, 6.9.5, 7.5.0
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 4.0.0 up to 4.1.2
  • From 4.2.0 before 4.7.3
  • From 6.0.0 up to 6.8.1
  • From 6.9.0 before 6.9.5
  • From 7.0.0 before 7.5.0
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2 before 1.0.2k
  • From 1.1.0 before 1.1.0c

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-7055
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-7055