There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce…
Severity
Medium 5.9
Published
7 Dec 2017
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
4.8.7, 6.12.2, 8.9.3, 9.2.1
Sources
NVD
Affected software
Software
Affected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
From 9.0.0 before 9.2.1
From 8.9.0 before 8.9.3
From 8.0.0 up to 8.8.1
From 6.9.0 before 6.12.2
All 7 release lines
From 4.0.0 up to 4.1.2
From 4.2.0 before 4.8.7
From 6.0.0 up to 6.8.1
From 6.9.0 before 6.12.2
From 8.0.0 up to 8.8.1
From 8.9.0 before 8.9.3
From 9.0.0 before 9.2.1
OpenSSLServers and applications · cpe:a:openssl:openssl