Description
The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 0.9.8e-6 | — |
| Debian 13 | openssl | 0.9.8e-6 | — |
| Debian 12 | openssl | 0.9.8e-6 | — |
| Debian 4.0 | openssl | 0.9.8c-4etch3 | DSA-1571-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | openssl +2 | 0.9.8b-8.3.el5_0.2 | RHSA-2007:0964 |
| RHEL 4 | openssl +2 | 0.9.7a-43.17.el4_6.1 | RHSA-2007:1003 |
| RHEL 3 | openssl +2 | 0.9.7a-33.24 | RHSA-2007:0813 |
| RHEL 2 | openssl +2 | 0.9.6b-48 | RHSA-2007:0813 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-1_0_0 | 1.0.2u-6.2 | openSUSE-SU-2024:11126-1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 | openSUSE-SU-2024:11127-1 |
Advisories 6
- RHSA-2007:0964 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:1003 Red Hat Security Advisory: openssl security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0813 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1571-1 openssl - predictable random number generator Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:11126-1 libopenssl-1_0_0-devel-1.0.2u-6.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11127-1 libopenssl-1_1-devel-1.1.1l-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- http://support.attachmate.com/techdocs/2374.html
- http://www.kb.cert.org/vuls/id/RGII-74KLP3
- VU#724968 third-party-advisory
- 26893 third-party-advisory
- DSA-1571 vendor-advisory
- 27205 third-party-advisory
- 20070813 FLEA-2007-0043-1 openssl mailing-list
- 27097 third-party-advisory
- ADV-2008-2362 vdb-entry
- ADV-2007-2759 vdb-entry
- oval:org.mitre.oval:def:9984 vdb-entry signature
- 31489 third-party-advisory
- RHSA-2007:1003 vendor-advisory
- 31531 third-party-advisory
- MDKSA-2007:193 vendor-advisory
- http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability
- 30220 third-party-advisory
- https://issues.rpath.com/browse/RPL-1633
- ADV-2007-4010 vdb-entry
- 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages mailing-list
- 27770 third-party-advisory
- [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages mailing-list
- 26411 third-party-advisory
- USN-522-1 vendor-advisory
- http://openssl.org/news/patch-CVE-2007-3108.txt
- ADV-2008-2361 vdb-entry
- 31467 third-party-advisory
- RHSA-2007:0964 vendor-advisory
- 27870 third-party-advisory
- ADV-2008-2396 vdb-entry
- 27330 third-party-advisory
- 30161 third-party-advisory
- GLSA-200805-07 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0013.html
- 28368 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm
- 27078 third-party-advisory
- GLSA-200710-06 vendor-advisory
- http://cvs.openssl.org/chngview?cn=16275
- https://issues.rpath.com/browse/RPL-1613
- RHSA-2007:0813 vendor-advisory
- 25163 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2008-0001.html
- ADV-2008-0064 vdb-entry
- 27021 third-party-advisory
- 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages mailing-list