The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain private keys via a timing attack.

Multiple sources report :

CVE-2015-2141: The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain private keys via a timing attack.
Fixed in 5.6.3.

CVE-2016-3995: Incorrect implementation of Rijndael timing attack countermeasure. Fixed in 5.6.4.

CVE-2016-7420: Library built without -DNDEBUG could egress sensitive information to the filesystem via a core dump if an assert was triggered. Fixed in 5.6.5.

libcryptopp was updated to fix one security issue.

This security issue was fixed :

  - CVE-2015-2141: The     InvertibleRWFunction::CalculateInverse function in     rw.cpp in libcrypt++ 5.6.2 did not properly blind     private key operations for the Rabin-Williams digital     signature algorithm, which allowed remote attackers to     obtain private keys via a timing attack (bsc#936435).

- Fix for CVE-2015-2141

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Evgeny Sidorov discovered that libcrypto++, a general purpose C++ cryptographic library, did not properly implement blinding to mask private key operations for the Rabin-Williams digital signature algorithm. This could allow remote attackers to mount a timing attack and retrieve the user's private key.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Evgeny Sidorov discovered that libcrypto++, a general purpose C++ cryptographic library, did not properly implement blinding to mask private key operations for the Rabin-Williams digital signature algorithm. This could allow remote attackers to mount a timing attack and retrieve the user's private key.

ID	Name	Product	Family	Severity
95589	FreeBSD : cryptopp -- multiple vulnerabilities (eab68cff-bc0c-11e6-b2ca-001b3856973b)	Nessus	FreeBSD Local Security Checks	high
84888	openSUSE Security Update : libcryptopp (openSUSE-2015-504)	Nessus	SuSE Local Security Checks	medium
84774	Fedora 22 : cryptopp-5.6.2-9.fc22 (2015-10914)	Nessus	Fedora Local Security Checks	medium
84773	Fedora 21 : cryptopp-5.6.2-9.fc21 (2015-10911)	Nessus	Fedora Local Security Checks	medium
84473	Debian DLA-262-1 : libcrypto++ security update	Nessus	Debian Local Security Checks	medium
84436	Debian DSA-3296-1 : libcrypto++ - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2015-2141

high

Tenable Plugins

high

medium

medium

medium

medium

medium