CVE-2015-2141
published 2015-07-01CVE-2015-2141: The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital…
PriorityP426medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
2.88%
85.5th percentile
The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain private keys via a timing attack.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cryptopp | crypto_+_+_library | — | — |
| debian | libcrypto | < libcrypto++ 5.6.1-7 (bookworm) | libcrypto++ 5.6.1-7 (bookworm) |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2015-2141: libcrypto++ - The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6....
vendor_debian·2015·CVSS 5.0
CVE-2015-2141 [MEDIUM] CVE-2015-2141: libcrypto++ - The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6....
The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain private keys via a timing attack.
Scope: local
bookworm: resolved (fixed in 5.6.1-7)
bullseye: resolved (fixed in 5.6.1-7)
forky: resolved (fixed in 5.6.1-7)
sid: resolved (fixed in 5.6.1-7)
trixie: resolved (fixed in 5.6.1-7)
GHSA
GHSA-xm6q-j5wx-7362: The InvertibleRWFunction::CalculateInverse function in rw
ghsa_unreviewed·2022-05-14
CVE-2015-2141 [MEDIUM] CWE-200 GHSA-xm6q-j5wx-7362: The InvertibleRWFunction::CalculateInverse function in rw
The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain private keys via a timing attack.
OSV
CVE-2015-2141: The InvertibleRWFunction::CalculateInverse function in rw
osv·2015-07-01·CVSS 5.0
CVE-2015-2141 [MEDIUM] CVE-2015-2141: The InvertibleRWFunction::CalculateInverse function in rw
The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain private keys via a timing attack.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-updates/2015-07/msg00047.htmlhttp://sourceforge.net/p/cryptopp/code/542/http://www.debian.org/security/2015/dsa-3296http://www.securityfocus.com/bid/75467https://github.com/weidai11/cryptopp/commit/9425e16437439e68c7d96abef922167d68fafaffhttp://lists.opensuse.org/opensuse-updates/2015-07/msg00047.htmlhttp://sourceforge.net/p/cryptopp/code/542/http://www.debian.org/security/2015/dsa-3296http://www.securityfocus.com/bid/75467https://github.com/weidai11/cryptopp/commit/9425e16437439e68c7d96abef922167d68fafaff
2015-07-01
Published