Debian/openssl: unknown

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack

Action: Upgrade openssl to 0.9.8e-6 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-3108
• https://security-tracker.debian.org/tracker/CVE-2007-3108

published 2007-08-08T01:17:00Z · modified 2026-10-21T17:47:48.798642193Z · JSON