What’s Vulnerable › Vulnerabilities

CVE-2015-7744

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2016-01-22 · updated 2026-06-17

Description

wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.

Affected products

• MariaDB: from 5.5.0 before 5.5.46; from 10.0.0 before 10.0.22; from 10.1.0 before 10.1.9 — fixed in 10.0.22, 10.1.9, 5.5.46
• openSUSE Leap: 42.1
• Opensuse: 13.1, 13.2
• wolfSSL: before 3.6.8 — fixed in 3.6.8

How to fix

Upgrade to a fixed version: MariaDB 10.0.22, 10.1.9, 5.5.46; wolfSSL 3.6.8. Check the vendor advisory for mitigations.

References

• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html
• http://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
• http://www.securitytracker.com/id/1034708
• https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf
• https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/
• https://wolfssl.com/wolfSSL/Blog/Entries/2015/9/17_Two_Vulnerabilities_Recently_Found%2C_An_Attack_on_RSA_using_CRT_and_DoS_Vulnerability_With_DTLS.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.html
• http://wolfssl.com/wolfSSL/Docs-wolfssl-changelog.html

Get alerted when CVE-2015-7744 or the next vulnerability affects your stack