← Database

CVE-2007-3108

LOW CVSS: 1.2 Published: 2007-08-08 Modified: 2026-06-16

Description

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

Affected Platforms

Openssl Openssl

Weakness Type

NVD-CWE-Other

References