{"api_version":"1","generated_at":"2026-07-23T23:23:41+00:00","cve":"CVE-2015-5738","urls":{"html":"https://cve.report/CVE-2015-5738","api":"https://cve.report/api/cve/CVE-2015-5738.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-5738","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-5738"},"summary":{"title":"CVE-2015-5738","description":"The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.","state":"PUBLISHED","assigner":"mitre","published_at":"2016-07-26 17:59:00","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf","name":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description","Third Party Advisory"],"title":"","mime":"application/pdf","httpstatus":"200","archivestatus":"200"},{"url":"http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions","name":"http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"RSA-CRT key leak under certain conditions | FortiGuard.com","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html","name":"https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"SOL91245485 - RSA-CRT key leak vulnerability CVE-2015-5738","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5738","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5738","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"5738","vulnerable":"1","versionEndIncluding":"3.5.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"f5","cpe5":"traffix_signaling_delivery_controller","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"5738","vulnerable":"1","versionEndIncluding":"4.4.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"f5","cpe5":"traffix_signaling_delivery_controller","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"5738","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"marvell","cpe5":"octeon_ii_cn6000","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"5738","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"marvell","cpe5":"octeon_ii_cn6010","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"5738","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"marvell","cpe5":"octeon_ii_cn6020","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"5738","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"marvell","cpe5":"software_development_kit","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2015-5738","qid":"900089","title":"CBL-Mariner Linux Security Update for kernel 5.4.51"},{"cve":"CVE-2015-5738","qid":"903041","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3480)"},{"cve":"CVE-2015-5738","qid":"906203","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3480-1)"}]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T06:59:04.382Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-09-17T00:00:00.000Z","descriptions":[{"lang":"en","value":"The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-07-26T17:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2015-5738","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf","refsource":"MISC","url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf"},{"name":"https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html","refsource":"CONFIRM","url":"https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html"},{"name":"http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions","refsource":"CONFIRM","url":"http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2015-5738","datePublished":"2016-07-26T17:00:00.000Z","dateReserved":"2015-08-05T00:00:00.000Z","dateUpdated":"2024-08-06T06:59:04.382Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2016-07-26 17:59:00","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marvell:software_development_kit:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E332EC67-B3F5-437D-BC1F-D563B89181B8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:marvell:octeon_ii_cn6000:-:*:*:*:*:*:*:*","matchCriteriaId":"E31C6DFB-101A-493A-8515-4DAAB9F3A821"},{"vulnerable":false,"criteria":"cpe:2.3:h:marvell:octeon_ii_cn6010:-:*:*:*:*:*:*:*","matchCriteriaId":"521C4A1A-96A2-4888-A345-8A153B793178"},{"vulnerable":false,"criteria":"cpe:2.3:h:marvell:octeon_ii_cn6020:-:*:*:*:*:*:*:*","matchCriteriaId":"94651B37-ABBE-4400-8880-033A4EDAB41F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.2","versionEndIncluding":"3.5.1","matchCriteriaId":"90B753A2-3CC6-46A2-82C4-F2B7A029E18C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.4.0","matchCriteriaId":"E0AAD5D5-E970-4875-8FDF-E940D9F00636"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"5738","Ordinal":"1","Title":"CVE-2015-5738","CVE":"CVE-2015-5738","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"5738","Ordinal":"1","NoteData":"The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.","Type":"Description","Title":"CVE-2015-5738"},{"CveYear":"2015","CveId":"5738","Ordinal":"2","NoteData":"2016-07-26","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"5738","Ordinal":"3","NoteData":"2016-07-26","Type":"Other","Title":"Modified"}]}}}